l3montree-dev / devguard

DevGuard Backend - Manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy, Compliance to security Frameworks - OWASP Incubating Project
https://flawfix.dev
Other
37 stars 4 forks source link

Scrape Exploit PoCs from GitHub #102

Closed timbastin closed 2 months ago

timbastin commented 2 months ago
  1. Input: https://github.com/nomi-sec/PoC-in-GitHub/tree/master
  2. Download https://github.com/nomi-sec/PoC-in-GitHub/archive/refs/heads/master.zip into temp folder
  3. Extract zip
  4. Iterate through all folders
    • Iterate through all files in folder
    • Read JSON
    • Iterate through each item in json
      • Create models.Exploit for each element
      • Convert github repository data structure into models.Exploit data structure (mapping)
      • Change models.Exploit@ID to string datatype
      • Prefix github exploits with github:
      • Prefix exploitdb exploits with exploitdb:
        1. Save in database