diff --git a/content/posts/commits/2026-07-05-commit-12f83f3.md b/content/posts/commits/2026-07-05-commit-12f83f3.md new file mode 100644 index 0000000..dc5610c --- /dev/null +++ b/content/posts/commits/2026-07-05-commit-12f83f3.md @@ -0,0 +1,47 @@ +--- +title: "[bojemoi] feat(ml-threat): add CVE/IP matcher pipeline with scikit-learn" +date: 2026-07-05T23:41:35+02:00 +draft: false +tags: ["commit", "bojemoi", "main"] +categories: ["Git Activity"] +summary: "Commit 12f83f3 par grafana-watcher dans bojemoi" +author: "grafana-watcher" +--- + +## Commit `12f83f3` + +| | | +|---|---| +| **Repository** | bojemoi | +| **Branch** | `main` | +| **Author** | grafana-watcher | +| **Hash** | `12f83f31a972c45703bc6d31e7e8bd838334f059` | + + +### Description + +New script cve_ip_matcher.py: +- Fetches latest CVEs from NVD API v2 (CVSS >= 6, configurable count) +- Loads hosts + services from MSF DB (port, name, banner) +- TF-IDF vectorization + cosine similarity CVE description/CPE vs banners +- GradientBoostingRegressor scores each (CVE, IP) pair 0-100 +- Keyword match table (service name → CPE keywords) for boosting +- CLI: --cve, --cve-count, --top, --json, --importances +- Add psycopg2-binary to requirements + +Co-Authored-By: Claude Sonnet 4.6 + +### Files Changed + +``` +A ml-threat/cve_ip_matcher.py +M ml-threat/requirements.txt +``` + +### Diff Summary + +``` + ml-threat/cve_ip_matcher.py | 634 ++++++++++++++++++++++++++++++++++++++++++++ + ml-threat/requirements.txt | 1 + + 2 files changed, 635 insertions(+) +```