Skip to content

Sorta reverse implementation of ShoVAT - Also includes NMAP banner regex results

Notifications You must be signed in to change notification settings

cloudtracer/text2cpe

Repository files navigation

text2cpe

Reversed sorta implementation of CPE Name detection in ShoVAT based on research paper Original Paper: http://www.ibs.ro/~bela/Papers/SCN2015.pdf

Could probably use some tuning, some CPE names are too generic like vmware:server and cause some false positives. Right now if I see to many of the same false positive that should be catching I'll remove the CPE identifier from the uniq_cpes file.

Here is the usage:

Text2CPE

  Reads banners from Shodan or Censys.io scan results and attempts to match the
  banner to a particular CPE. Based on ShoVAT paper.                            

Options

  -i, --input-file file    Shodan or Censys file to read.
  -o, --output-file file   Output file to save results.   
  -h, --help               Print this usage guide.        

Examples

  Read file and save results   $ node text2cpe.js -i /my/path/to/input -o       
                               /my/path/to/output                               

  Follow: @ThreatPinch for updates.

Here is some sample CSV output from the first few lines of the file.

Link to NPM package: text2cpe

Install with the following command:

npm install --save text2cpe

About

Sorta reverse implementation of ShoVAT - Also includes NMAP banner regex results

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published