418sec / huntr

Public Roadmap | huntr.dev
https://huntr.dev
263 stars 89 forks source link

Cluster similar CWEs #2132

Open thelabda opened 3 years ago

thelabda commented 3 years ago

Feature: Group similar vulnerabilities into main Vulnerability categories There are many vulnerability type categories, for a pretty cool sample take a look at the following:

https://github.com/bugcrowd/vulnerability-rating-taxonomy

It makes the researcher's life easier, if we don't have to loop through all the vuln-types, rather just selecting the main category and going deeper for some sub-categories or even for the exact vuln-type.

adam-nygate commented 3 years ago

Awesome resource! Thanks for that. I'll see if the bugcrowd framework has a nice breakdown of the subcategories, and see how it maps to CWEs