Vultriever - Vulnerability scoring with Nmap

Vultriever - utility that allows to convert to Excel and JSON formats the results of using the Nmap scanner in conjunction with the built-in Vulners snap-in. It was created to automate the process of inventory of open ports and running network services on the server and scoring of existing vulnerabilities determined based on the versions of the software used. Implemented the use of Vultriever from the terminal and as an imported module in native Python scripts.

In the process, Vultriever collects and provides the following information about the server in a structured form:

• Server IP address
• Network port number
• Network port status
• Protocol used by the network port
• Network service operating on the network port and its version
• Vulnerability CVE-identifier
• Vulnerability rating
• URL-link to the description of the vulnerability on the platform Vulners.com

Vultriever usage in TERMINAL:

In this mode, Vultriever returns the result in Excel document format.

Analysis of specific IP-address:

sudo python vultriever.py <ip_address> <Nmap argument> <Nmap argument> ... <Nmap argument>
sudo python vultriever.py x.x.x.x O sV Pn

Analysis of list of IP-addresses:

sudo python vultriever.py <filename>.txt <Nmap argument> <Nmap argument> ... <Nmap argument>
sudo python vultriever.py list.txt O sV Pn

The format of the list is a column of IP-addresses line by line without spaces and other characters:

x.x.x.x
y.y.y.y

.......

z.z.z.z                        

Result Excel document:

Vultriever usage in PYTHON code:

In this mode, Vultriever returns the result in JSON format.

vultriever(<ip_address>, [<Nmap argument>, <Nmap argument>, ..., <Nmap argument>])

Python Script

from vultriever import vultriever

result = vultriever('x.x.x.x', ['O','sV','Pn'])

vultriever() function works for one IP-address in time and returns information in JSON format with next structure:

{
    "ip_address" : "x.x.x.x",
    "ports" : [
        
                    {
                        "number" : 26,
                        "status" : "open",
                        "protocol" : "smtp",
                        "service" : "Eximsmtpd4.95",
                        "vulnerabilities" : [
                            
                                                {
                                                    "cve" : "CVE-2022-37452",
                                                    "score" : "9.8",
                                                    "url" : "https://vulners.com/cve/CVE-2022-37452"
                                                }
                            
                        ]
                        
                    }
        
    ]
}

Incorrect request will result to 'error_message' in JSON response keys

{
    
    "error_message" : <error message>
    
}

Requirements

• Nmap
• openpyxl python module