vamp-cve-oracle 3.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. vamp_cve_oracle-3.0/PKG-INFO +191 -0
  2. vamp_cve_oracle-3.0/README.md +170 -0
  3. vamp_cve_oracle-3.0/pyproject.toml +37 -0
  4. vamp_cve_oracle-3.0/setup.cfg +4 -0
  5. vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/PKG-INFO +191 -0
  6. vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/SOURCES.txt +10 -0
  7. vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/dependency_links.txt +1 -0
  8. vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/entry_points.txt +2 -0
  9. vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/requires.txt +2 -0
  10. vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/top_level.txt +2 -0
  11. vamp_cve_oracle-3.0/vamp_cve_oracle.py +1519 -0
  12. vamp_cve_oracle-3.0/vampsec_report.py +959 -0
vamp_cve_oracle-3.0/PKG-INFO ADDED
@@ -0,0 +1,191 @@
1
+ Metadata-Version: 2.4
2
+ Name: vamp-cve-oracle
3
+ Version: 3.0
4
+ Summary: CVE vulnerability intelligence aggregator for authorized security assessments
5
+ Author-email: VampSecure Studios <contact@vampsecurestudios.com>
6
+ License: MIT
7
+ Project-URL: Homepage, https://github.com/Vampsecure-Labs/vamp-cve-oracle
8
+ Project-URL: Repository, https://github.com/Vampsecure-Labs/vamp-cve-oracle
9
+ Keywords: security,pentest,audit,cybersecurity,vampsecure,cve,vulnerability,nvd,threat-intelligence
10
+ Classifier: Development Status :: 5 - Production/Stable
11
+ Classifier: Environment :: Console
12
+ Classifier: Intended Audience :: Information Technology
13
+ Classifier: License :: OSI Approved :: MIT License
14
+ Classifier: Operating System :: OS Independent
15
+ Classifier: Programming Language :: Python :: 3
16
+ Classifier: Topic :: Security
17
+ Requires-Python: >=3.9
18
+ Description-Content-Type: text/markdown
19
+ Requires-Dist: aiohttp>=3.9.0
20
+ Requires-Dist: rich>=13.7.0
21
+
22
+ <p align="center">
23
+ <img src="https://img.shields.io/badge/version-3.0-crimson?style=flat-square" />
24
+ <img src="https://img.shields.io/badge/python-3.11+-blue?style=flat-square&logo=python&logoColor=white" />
25
+ <img src="https://img.shields.io/badge/async-aiohttp-teal?style=flat-square" />
26
+ <img src="https://img.shields.io/badge/VampSecure_Labs-Security_Research-8b0000?style=flat-square" />
27
+ </p>
28
+
29
+ <h1 align="center">vamp-cve-oracle</h1>
30
+ <p align="center"><em>CVE Intelligence &amp; Risk-Based Vulnerability Management Engine — VampSecure Labs</em></p>
31
+
32
+ ---
33
+
34
+ ## Overview
35
+
36
+ **vamp-cve-oracle** is an asynchronous CVE intelligence platform that enriches vulnerability data from four authoritative sources and applies a Risk-Based Vulnerability Management (RBVM) scoring model to prioritize remediation effort.
37
+
38
+ It correlates threat intelligence from the **NVD**, **AlienVault OTX**, **FIRST.org EPSS**, and the **CISA KEV catalog**, then computes a composite priority score using the formula:
39
+
40
+ ```
41
+ Priority = EPSS_probability × CVSS_base_score
42
+ ```
43
+
44
+ EPSS (Exploit Prediction Scoring System) quantifies the probability of exploitation in the wild within 30 days, making this metric a reliable signal for distinguishing theoretically severe CVEs from those actively being exploited. An optional asset inventory CSV allows per-host correlation, weighting findings by asset criticality.
45
+
46
+ ---
47
+
48
+ ## Features
49
+
50
+ - Four-source intelligence aggregation: NVD, AlienVault OTX, FIRST.org EPSS, CISA KEV
51
+ - RBVM priority scoring: `EPSS × CVSS` with configurable asset criticality weighting
52
+ - CISA KEV integration — immediately flags vulnerabilities under active exploitation
53
+ - Asset inventory correlation via CSV (`host,software,version,criticality`)
54
+ - Batch CVE processing from file — handles large sets of identifiers efficiently
55
+ - Four output formats: Rich console, JSON, dark-theme HTML, and Markdown (GFM)
56
+ - Configurable API keys for higher rate limits on both NVD and OTX
57
+
58
+ ---
59
+
60
+ ## Requirements
61
+
62
+ ```
63
+ Python 3.11+
64
+ aiohttp >= 3.9.0
65
+ rich >= 13.7.0
66
+ ```
67
+
68
+ Install dependencies:
69
+
70
+ ```bash
71
+ pip install -r requirements.txt
72
+ ```
73
+
74
+ ---
75
+
76
+ ## Installation
77
+
78
+ ```bash
79
+ git clone https://github.com/belky-me/vamp-cve-oracle.git
80
+ cd vamp-cve-oracle
81
+ pip install -r requirements.txt
82
+ ```
83
+
84
+ ---
85
+
86
+ ## Configuration
87
+
88
+ API keys are optional but strongly recommended to avoid rate limiting on large batches:
89
+
90
+ | Variable | Source | Default rate limit |
91
+ |----------|--------|--------------------|
92
+ | `NVD_API_KEY` | https://nvd.nist.gov/developers/request-an-api-key | 5 req / 30 s → 50 req / 30 s |
93
+ | `OTX_API_KEY` | https://otx.alienvault.com | Anonymous access |
94
+
95
+ ```bash
96
+ export NVD_API_KEY=your_nvd_key
97
+ export OTX_API_KEY=your_otx_key
98
+ ```
99
+
100
+ ---
101
+
102
+ ## Usage
103
+
104
+ ```
105
+ python vamp_cve_oracle.py [CVE-ID ...] [OPTIONS]
106
+
107
+ Positional:
108
+ CVE-ID [CVE-ID ...] One or more CVE identifiers (e.g. CVE-2024-21762)
109
+
110
+ Input:
111
+ -f, --file FILE File with one CVE ID per line
112
+
113
+ Asset correlation:
114
+ --inventory FILE CSV file: host,software,version,criticality
115
+
116
+ Output:
117
+ -o, --output FILE Write findings to JSON
118
+ --html FILE Generate standalone HTML report (dark theme)
119
+ --markdown FILE Generate Markdown report (GFM-compatible)
120
+ ```
121
+
122
+ ---
123
+
124
+ ## Examples
125
+
126
+ Query a single CVE with full intelligence context:
127
+
128
+ ```bash
129
+ python vamp_cve_oracle.py CVE-2024-21762
130
+ ```
131
+
132
+ Process a list of CVEs from a penetration test and write a JSON report:
133
+
134
+ ```bash
135
+ python vamp_cve_oracle.py -f pentest_cves.txt -o results.json
136
+ ```
137
+
138
+ Correlate findings against an asset inventory and generate an HTML report:
139
+
140
+ ```bash
141
+ python vamp_cve_oracle.py -f cves.txt --inventory assets.csv --html rbvm_report.html
142
+ ```
143
+
144
+ Query multiple CVEs and export Markdown for wiki or ticket integration:
145
+
146
+ ```bash
147
+ python vamp_cve_oracle.py CVE-2023-27997 CVE-2022-40684 CVE-2024-21762 --markdown findings.md
148
+ ```
149
+
150
+ ---
151
+
152
+ ## Output Formats
153
+
154
+ | Format | How to enable | Description |
155
+ |--------|---------------|-------------|
156
+ | Console | Default | Rich panel per CVE with CVSS, EPSS score, KEV status, and OTX pulse count |
157
+ | JSON | `-o FILE` | Full structured output including all source data and priority scores |
158
+ | HTML | `--html FILE` | Dark-theme standalone report, browser-ready |
159
+ | Markdown | `--markdown FILE` | GFM-compatible export for GitHub, Confluence, or Jira tickets |
160
+
161
+ ---
162
+
163
+ ## Exit Codes
164
+
165
+ | Code | Meaning | CI/CD usage |
166
+ |------|---------|-------------|
167
+ | `0` | All CVEs processed cleanly, no critical KEV hits | Pass gate |
168
+ | `1` | Findings present — review RBVM scores | Review recommended |
169
+ | `2` | Critical or KEV-confirmed exploited vulnerabilities found | Fail gate — remediate immediately |
170
+
171
+ ---
172
+
173
+ ## Part of VampSecure Labs Toolkit
174
+
175
+ `vamp-cve-oracle` is part of the **VampSecure Labs Security Research Toolkit** — a collection of professional-grade, self-hosted security assessment tools.
176
+
177
+ | Tool | Purpose |
178
+ |------|---------|
179
+ | [vamp-forticheck](https://github.com/belky-me/vamp-forticheck) | Multi-vendor edge device CVE scanner |
180
+ | [vamp-cve-oracle](https://github.com/belky-me/vamp-cve-oracle) | CVE intelligence and RBVM engine |
181
+ | [vamp-passive-recon](https://github.com/belky-me/vamp-passive-recon) | Passive recon and attack surface mapping |
182
+ | [vamp-subdomain-takeover](https://github.com/belky-me/vamp-subdomain-takeover) | Subdomain takeover vulnerability scanner |
183
+ | [vamp-cloud-enum](https://github.com/belky-me/vamp-cloud-enum) | Cloud storage bucket enumerator |
184
+ | [vamp-orchestrator](https://github.com/belky-me/vamp-orchestrator) | Multi-tool assessment orchestrator |
185
+
186
+ ---
187
+
188
+ <p align="center">
189
+ © VampSecure Studios — VampSecure Labs Security Research Division<br/>
190
+ For authorized security assessments only. Unauthorized use is prohibited.
191
+ </p>
vamp_cve_oracle-3.0/README.md ADDED
@@ -0,0 +1,170 @@
1
+ <p align="center">
2
+ <img src="https://img.shields.io/badge/version-3.0-crimson?style=flat-square" />
3
+ <img src="https://img.shields.io/badge/python-3.11+-blue?style=flat-square&logo=python&logoColor=white" />
4
+ <img src="https://img.shields.io/badge/async-aiohttp-teal?style=flat-square" />
5
+ <img src="https://img.shields.io/badge/VampSecure_Labs-Security_Research-8b0000?style=flat-square" />
6
+ </p>
7
+
8
+ <h1 align="center">vamp-cve-oracle</h1>
9
+ <p align="center"><em>CVE Intelligence &amp; Risk-Based Vulnerability Management Engine — VampSecure Labs</em></p>
10
+
11
+ ---
12
+
13
+ ## Overview
14
+
15
+ **vamp-cve-oracle** is an asynchronous CVE intelligence platform that enriches vulnerability data from four authoritative sources and applies a Risk-Based Vulnerability Management (RBVM) scoring model to prioritize remediation effort.
16
+
17
+ It correlates threat intelligence from the **NVD**, **AlienVault OTX**, **FIRST.org EPSS**, and the **CISA KEV catalog**, then computes a composite priority score using the formula:
18
+
19
+ ```
20
+ Priority = EPSS_probability × CVSS_base_score
21
+ ```
22
+
23
+ EPSS (Exploit Prediction Scoring System) quantifies the probability of exploitation in the wild within 30 days, making this metric a reliable signal for distinguishing theoretically severe CVEs from those actively being exploited. An optional asset inventory CSV allows per-host correlation, weighting findings by asset criticality.
24
+
25
+ ---
26
+
27
+ ## Features
28
+
29
+ - Four-source intelligence aggregation: NVD, AlienVault OTX, FIRST.org EPSS, CISA KEV
30
+ - RBVM priority scoring: `EPSS × CVSS` with configurable asset criticality weighting
31
+ - CISA KEV integration — immediately flags vulnerabilities under active exploitation
32
+ - Asset inventory correlation via CSV (`host,software,version,criticality`)
33
+ - Batch CVE processing from file — handles large sets of identifiers efficiently
34
+ - Four output formats: Rich console, JSON, dark-theme HTML, and Markdown (GFM)
35
+ - Configurable API keys for higher rate limits on both NVD and OTX
36
+
37
+ ---
38
+
39
+ ## Requirements
40
+
41
+ ```
42
+ Python 3.11+
43
+ aiohttp >= 3.9.0
44
+ rich >= 13.7.0
45
+ ```
46
+
47
+ Install dependencies:
48
+
49
+ ```bash
50
+ pip install -r requirements.txt
51
+ ```
52
+
53
+ ---
54
+
55
+ ## Installation
56
+
57
+ ```bash
58
+ git clone https://github.com/belky-me/vamp-cve-oracle.git
59
+ cd vamp-cve-oracle
60
+ pip install -r requirements.txt
61
+ ```
62
+
63
+ ---
64
+
65
+ ## Configuration
66
+
67
+ API keys are optional but strongly recommended to avoid rate limiting on large batches:
68
+
69
+ | Variable | Source | Default rate limit |
70
+ |----------|--------|--------------------|
71
+ | `NVD_API_KEY` | https://nvd.nist.gov/developers/request-an-api-key | 5 req / 30 s → 50 req / 30 s |
72
+ | `OTX_API_KEY` | https://otx.alienvault.com | Anonymous access |
73
+
74
+ ```bash
75
+ export NVD_API_KEY=your_nvd_key
76
+ export OTX_API_KEY=your_otx_key
77
+ ```
78
+
79
+ ---
80
+
81
+ ## Usage
82
+
83
+ ```
84
+ python vamp_cve_oracle.py [CVE-ID ...] [OPTIONS]
85
+
86
+ Positional:
87
+ CVE-ID [CVE-ID ...] One or more CVE identifiers (e.g. CVE-2024-21762)
88
+
89
+ Input:
90
+ -f, --file FILE File with one CVE ID per line
91
+
92
+ Asset correlation:
93
+ --inventory FILE CSV file: host,software,version,criticality
94
+
95
+ Output:
96
+ -o, --output FILE Write findings to JSON
97
+ --html FILE Generate standalone HTML report (dark theme)
98
+ --markdown FILE Generate Markdown report (GFM-compatible)
99
+ ```
100
+
101
+ ---
102
+
103
+ ## Examples
104
+
105
+ Query a single CVE with full intelligence context:
106
+
107
+ ```bash
108
+ python vamp_cve_oracle.py CVE-2024-21762
109
+ ```
110
+
111
+ Process a list of CVEs from a penetration test and write a JSON report:
112
+
113
+ ```bash
114
+ python vamp_cve_oracle.py -f pentest_cves.txt -o results.json
115
+ ```
116
+
117
+ Correlate findings against an asset inventory and generate an HTML report:
118
+
119
+ ```bash
120
+ python vamp_cve_oracle.py -f cves.txt --inventory assets.csv --html rbvm_report.html
121
+ ```
122
+
123
+ Query multiple CVEs and export Markdown for wiki or ticket integration:
124
+
125
+ ```bash
126
+ python vamp_cve_oracle.py CVE-2023-27997 CVE-2022-40684 CVE-2024-21762 --markdown findings.md
127
+ ```
128
+
129
+ ---
130
+
131
+ ## Output Formats
132
+
133
+ | Format | How to enable | Description |
134
+ |--------|---------------|-------------|
135
+ | Console | Default | Rich panel per CVE with CVSS, EPSS score, KEV status, and OTX pulse count |
136
+ | JSON | `-o FILE` | Full structured output including all source data and priority scores |
137
+ | HTML | `--html FILE` | Dark-theme standalone report, browser-ready |
138
+ | Markdown | `--markdown FILE` | GFM-compatible export for GitHub, Confluence, or Jira tickets |
139
+
140
+ ---
141
+
142
+ ## Exit Codes
143
+
144
+ | Code | Meaning | CI/CD usage |
145
+ |------|---------|-------------|
146
+ | `0` | All CVEs processed cleanly, no critical KEV hits | Pass gate |
147
+ | `1` | Findings present — review RBVM scores | Review recommended |
148
+ | `2` | Critical or KEV-confirmed exploited vulnerabilities found | Fail gate — remediate immediately |
149
+
150
+ ---
151
+
152
+ ## Part of VampSecure Labs Toolkit
153
+
154
+ `vamp-cve-oracle` is part of the **VampSecure Labs Security Research Toolkit** — a collection of professional-grade, self-hosted security assessment tools.
155
+
156
+ | Tool | Purpose |
157
+ |------|---------|
158
+ | [vamp-forticheck](https://github.com/belky-me/vamp-forticheck) | Multi-vendor edge device CVE scanner |
159
+ | [vamp-cve-oracle](https://github.com/belky-me/vamp-cve-oracle) | CVE intelligence and RBVM engine |
160
+ | [vamp-passive-recon](https://github.com/belky-me/vamp-passive-recon) | Passive recon and attack surface mapping |
161
+ | [vamp-subdomain-takeover](https://github.com/belky-me/vamp-subdomain-takeover) | Subdomain takeover vulnerability scanner |
162
+ | [vamp-cloud-enum](https://github.com/belky-me/vamp-cloud-enum) | Cloud storage bucket enumerator |
163
+ | [vamp-orchestrator](https://github.com/belky-me/vamp-orchestrator) | Multi-tool assessment orchestrator |
164
+
165
+ ---
166
+
167
+ <p align="center">
168
+ © VampSecure Studios — VampSecure Labs Security Research Division<br/>
169
+ For authorized security assessments only. Unauthorized use is prohibited.
170
+ </p>
vamp_cve_oracle-3.0/pyproject.toml ADDED
@@ -0,0 +1,37 @@
1
+ [build-system]
2
+ requires = ["setuptools>=68", "wheel"]
3
+ build-backend = "setuptools.build_meta"
4
+
5
+ [project]
6
+ name = "vamp-cve-oracle"
7
+ version = "3.0"
8
+ description = "CVE vulnerability intelligence aggregator for authorized security assessments"
9
+ readme = "README.md"
10
+ license = { text = "MIT" }
11
+ requires-python = ">=3.9"
12
+ authors = [{ name = "VampSecure Studios", email = "contact@vampsecurestudios.com" }]
13
+ keywords = ["security", "pentest", "audit", "cybersecurity", "vampsecure", "cve", "vulnerability", "nvd", "threat-intelligence"]
14
+ classifiers = [
15
+ "Development Status :: 5 - Production/Stable",
16
+ "Environment :: Console",
17
+ "Intended Audience :: Information Technology",
18
+ "License :: OSI Approved :: MIT License",
19
+ "Operating System :: OS Independent",
20
+ "Programming Language :: Python :: 3",
21
+ "Topic :: Security",
22
+ ]
23
+ dependencies = [
24
+ "aiohttp>=3.9.0",
25
+ "rich>=13.7.0",
26
+ ]
27
+
28
+
29
+ [project.scripts]
30
+ vamp-cve-oracle = "vamp_cve_oracle:main"
31
+
32
+ [project.urls]
33
+ Homepage = "https://github.com/Vampsecure-Labs/vamp-cve-oracle"
34
+ Repository = "https://github.com/Vampsecure-Labs/vamp-cve-oracle"
35
+
36
+ [tool.setuptools]
37
+ py-modules = ["vamp_cve_oracle", "vampsec_report"]
vamp_cve_oracle-3.0/setup.cfg ADDED
@@ -0,0 +1,4 @@
1
+ [egg_info]
2
+ tag_build =
3
+ tag_date = 0
4
+
vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/PKG-INFO ADDED
@@ -0,0 +1,191 @@
1
+ Metadata-Version: 2.4
2
+ Name: vamp-cve-oracle
3
+ Version: 3.0
4
+ Summary: CVE vulnerability intelligence aggregator for authorized security assessments
5
+ Author-email: VampSecure Studios <contact@vampsecurestudios.com>
6
+ License: MIT
7
+ Project-URL: Homepage, https://github.com/Vampsecure-Labs/vamp-cve-oracle
8
+ Project-URL: Repository, https://github.com/Vampsecure-Labs/vamp-cve-oracle
9
+ Keywords: security,pentest,audit,cybersecurity,vampsecure,cve,vulnerability,nvd,threat-intelligence
10
+ Classifier: Development Status :: 5 - Production/Stable
11
+ Classifier: Environment :: Console
12
+ Classifier: Intended Audience :: Information Technology
13
+ Classifier: License :: OSI Approved :: MIT License
14
+ Classifier: Operating System :: OS Independent
15
+ Classifier: Programming Language :: Python :: 3
16
+ Classifier: Topic :: Security
17
+ Requires-Python: >=3.9
18
+ Description-Content-Type: text/markdown
19
+ Requires-Dist: aiohttp>=3.9.0
20
+ Requires-Dist: rich>=13.7.0
21
+
22
+ <p align="center">
23
+ <img src="https://img.shields.io/badge/version-3.0-crimson?style=flat-square" />
24
+ <img src="https://img.shields.io/badge/python-3.11+-blue?style=flat-square&logo=python&logoColor=white" />
25
+ <img src="https://img.shields.io/badge/async-aiohttp-teal?style=flat-square" />
26
+ <img src="https://img.shields.io/badge/VampSecure_Labs-Security_Research-8b0000?style=flat-square" />
27
+ </p>
28
+
29
+ <h1 align="center">vamp-cve-oracle</h1>
30
+ <p align="center"><em>CVE Intelligence &amp; Risk-Based Vulnerability Management Engine — VampSecure Labs</em></p>
31
+
32
+ ---
33
+
34
+ ## Overview
35
+
36
+ **vamp-cve-oracle** is an asynchronous CVE intelligence platform that enriches vulnerability data from four authoritative sources and applies a Risk-Based Vulnerability Management (RBVM) scoring model to prioritize remediation effort.
37
+
38
+ It correlates threat intelligence from the **NVD**, **AlienVault OTX**, **FIRST.org EPSS**, and the **CISA KEV catalog**, then computes a composite priority score using the formula:
39
+
40
+ ```
41
+ Priority = EPSS_probability × CVSS_base_score
42
+ ```
43
+
44
+ EPSS (Exploit Prediction Scoring System) quantifies the probability of exploitation in the wild within 30 days, making this metric a reliable signal for distinguishing theoretically severe CVEs from those actively being exploited. An optional asset inventory CSV allows per-host correlation, weighting findings by asset criticality.
45
+
46
+ ---
47
+
48
+ ## Features
49
+
50
+ - Four-source intelligence aggregation: NVD, AlienVault OTX, FIRST.org EPSS, CISA KEV
51
+ - RBVM priority scoring: `EPSS × CVSS` with configurable asset criticality weighting
52
+ - CISA KEV integration — immediately flags vulnerabilities under active exploitation
53
+ - Asset inventory correlation via CSV (`host,software,version,criticality`)
54
+ - Batch CVE processing from file — handles large sets of identifiers efficiently
55
+ - Four output formats: Rich console, JSON, dark-theme HTML, and Markdown (GFM)
56
+ - Configurable API keys for higher rate limits on both NVD and OTX
57
+
58
+ ---
59
+
60
+ ## Requirements
61
+
62
+ ```
63
+ Python 3.11+
64
+ aiohttp >= 3.9.0
65
+ rich >= 13.7.0
66
+ ```
67
+
68
+ Install dependencies:
69
+
70
+ ```bash
71
+ pip install -r requirements.txt
72
+ ```
73
+
74
+ ---
75
+
76
+ ## Installation
77
+
78
+ ```bash
79
+ git clone https://github.com/belky-me/vamp-cve-oracle.git
80
+ cd vamp-cve-oracle
81
+ pip install -r requirements.txt
82
+ ```
83
+
84
+ ---
85
+
86
+ ## Configuration
87
+
88
+ API keys are optional but strongly recommended to avoid rate limiting on large batches:
89
+
90
+ | Variable | Source | Default rate limit |
91
+ |----------|--------|--------------------|
92
+ | `NVD_API_KEY` | https://nvd.nist.gov/developers/request-an-api-key | 5 req / 30 s → 50 req / 30 s |
93
+ | `OTX_API_KEY` | https://otx.alienvault.com | Anonymous access |
94
+
95
+ ```bash
96
+ export NVD_API_KEY=your_nvd_key
97
+ export OTX_API_KEY=your_otx_key
98
+ ```
99
+
100
+ ---
101
+
102
+ ## Usage
103
+
104
+ ```
105
+ python vamp_cve_oracle.py [CVE-ID ...] [OPTIONS]
106
+
107
+ Positional:
108
+ CVE-ID [CVE-ID ...] One or more CVE identifiers (e.g. CVE-2024-21762)
109
+
110
+ Input:
111
+ -f, --file FILE File with one CVE ID per line
112
+
113
+ Asset correlation:
114
+ --inventory FILE CSV file: host,software,version,criticality
115
+
116
+ Output:
117
+ -o, --output FILE Write findings to JSON
118
+ --html FILE Generate standalone HTML report (dark theme)
119
+ --markdown FILE Generate Markdown report (GFM-compatible)
120
+ ```
121
+
122
+ ---
123
+
124
+ ## Examples
125
+
126
+ Query a single CVE with full intelligence context:
127
+
128
+ ```bash
129
+ python vamp_cve_oracle.py CVE-2024-21762
130
+ ```
131
+
132
+ Process a list of CVEs from a penetration test and write a JSON report:
133
+
134
+ ```bash
135
+ python vamp_cve_oracle.py -f pentest_cves.txt -o results.json
136
+ ```
137
+
138
+ Correlate findings against an asset inventory and generate an HTML report:
139
+
140
+ ```bash
141
+ python vamp_cve_oracle.py -f cves.txt --inventory assets.csv --html rbvm_report.html
142
+ ```
143
+
144
+ Query multiple CVEs and export Markdown for wiki or ticket integration:
145
+
146
+ ```bash
147
+ python vamp_cve_oracle.py CVE-2023-27997 CVE-2022-40684 CVE-2024-21762 --markdown findings.md
148
+ ```
149
+
150
+ ---
151
+
152
+ ## Output Formats
153
+
154
+ | Format | How to enable | Description |
155
+ |--------|---------------|-------------|
156
+ | Console | Default | Rich panel per CVE with CVSS, EPSS score, KEV status, and OTX pulse count |
157
+ | JSON | `-o FILE` | Full structured output including all source data and priority scores |
158
+ | HTML | `--html FILE` | Dark-theme standalone report, browser-ready |
159
+ | Markdown | `--markdown FILE` | GFM-compatible export for GitHub, Confluence, or Jira tickets |
160
+
161
+ ---
162
+
163
+ ## Exit Codes
164
+
165
+ | Code | Meaning | CI/CD usage |
166
+ |------|---------|-------------|
167
+ | `0` | All CVEs processed cleanly, no critical KEV hits | Pass gate |
168
+ | `1` | Findings present — review RBVM scores | Review recommended |
169
+ | `2` | Critical or KEV-confirmed exploited vulnerabilities found | Fail gate — remediate immediately |
170
+
171
+ ---
172
+
173
+ ## Part of VampSecure Labs Toolkit
174
+
175
+ `vamp-cve-oracle` is part of the **VampSecure Labs Security Research Toolkit** — a collection of professional-grade, self-hosted security assessment tools.
176
+
177
+ | Tool | Purpose |
178
+ |------|---------|
179
+ | [vamp-forticheck](https://github.com/belky-me/vamp-forticheck) | Multi-vendor edge device CVE scanner |
180
+ | [vamp-cve-oracle](https://github.com/belky-me/vamp-cve-oracle) | CVE intelligence and RBVM engine |
181
+ | [vamp-passive-recon](https://github.com/belky-me/vamp-passive-recon) | Passive recon and attack surface mapping |
182
+ | [vamp-subdomain-takeover](https://github.com/belky-me/vamp-subdomain-takeover) | Subdomain takeover vulnerability scanner |
183
+ | [vamp-cloud-enum](https://github.com/belky-me/vamp-cloud-enum) | Cloud storage bucket enumerator |
184
+ | [vamp-orchestrator](https://github.com/belky-me/vamp-orchestrator) | Multi-tool assessment orchestrator |
185
+
186
+ ---
187
+
188
+ <p align="center">
189
+ © VampSecure Studios — VampSecure Labs Security Research Division<br/>
190
+ For authorized security assessments only. Unauthorized use is prohibited.
191
+ </p>
vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/SOURCES.txt ADDED
@@ -0,0 +1,10 @@
1
+ README.md
2
+ pyproject.toml
3
+ vamp_cve_oracle.py
4
+ vampsec_report.py
5
+ vamp_cve_oracle.egg-info/PKG-INFO
6
+ vamp_cve_oracle.egg-info/SOURCES.txt
7
+ vamp_cve_oracle.egg-info/dependency_links.txt
8
+ vamp_cve_oracle.egg-info/entry_points.txt
9
+ vamp_cve_oracle.egg-info/requires.txt
10
+ vamp_cve_oracle.egg-info/top_level.txt
vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/entry_points.txt ADDED
@@ -0,0 +1,2 @@
1
+ [console_scripts]
2
+ vamp-cve-oracle = vamp_cve_oracle:main
vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/requires.txt ADDED
@@ -0,0 +1,2 @@
1
+ aiohttp>=3.9.0
2
+ rich>=13.7.0
vamp_cve_oracle-3.0/vamp_cve_oracle.egg-info/top_level.txt ADDED
@@ -0,0 +1,2 @@
1
+ vamp_cve_oracle
2
+ vampsec_report