update README

This commit is contained in:
Brendan McDevitt 2022-04-06 02:35:02 -05:00
parent c152086fad
commit 4ae8f9e078
2 changed files with 38 additions and 4 deletions

View file

@ -1,8 +1,14 @@
# data_importer
Import common security data such as CVE, CPE, and Advisories from various CNAs into a postgresql database in a rails application.
Import common security data such as CVE, CPE, and Advisories from various CNAs into a rails rails app with a postgresql db backend.
## Getting started
## Supported data models:
- `Cve` data from [cve_list](https://github.com/CVEProject/cvelist) mitre.
- `Cpe` data from [nvd](https://nvd.nist.gov/products/cpe) 2.2 format.
- `GithubPoc` data from [nomi-sec](https://github.com/nomi-sec/PoC-in-GitHub).
- `InthewildCveExploit` data from [inthewild.io](https://inthewild.io/api/exploited) exploited feed.
## Initial Setup
### Build container
`docker-compose build`
@ -11,8 +17,35 @@ Import common security data such as CVE, CPE, and Advisories from various CNAs i
```
docker-compose run web rake db:create
docker-compose run web rake db:migrate
docker-compose run web rake db:setup
docker-compose run web rake db:seed
```
### Launch Pry console
`docker-compose run web rails console`
### HTTP API
#### Cves
```
get "/cves", to: "cves#index"
get "/cves/:cve_id", to: "cves#show"
get "/cves/years/:year", to: "cves#show_year"
```
#### Cpes
```
get "/cpes", to: "cpes#index"
get "/cpes/:id", to: "cpes#show"
```
#### GithubPocs
```
get "/github_pocs", to: "github_pocs#index"
get "/github_pocs/:id", to: "github_pocs#show"
get "/github_pocs/cve/:cve_id", to: "github_pocs#show_for_cve"
```
#### InthewildCveExploits
```
get "/inthewild_cve_exploits", to: "inthewild_cve_exploits#index"
get "/inthewild_cve_exploits/:cve_id", to: "inthewild_cve_exploits#show"
```

View file

@ -18,6 +18,7 @@ end
def perform
import_cves
import_github_pocs
import_inthewild_cve_exploits
import_cpes
end
@ -41,4 +42,4 @@ def import_inthewild_cve_exploits
InthewildCveExploitImporter.new.import
end
import_inthewild_cve_exploits
perform