blog/content/posts/commits/2026-07-05-commit-12f83f3.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[bojemoi] feat(ml-threat): add CVE/IP matcher pipeline with scikit-learn	2026-07-05T23:41:35+02:00	false	commit bojemoi main	Git Activity	Commit 12f83f3 par grafana-watcher dans bojemoi	grafana-watcher

Commit 12f83f3

Repository	bojemoi
Branch	main
Author	grafana-watcher
Hash	12f83f31a972c45703bc6d31e7e8bd838334f059

Description

New script cve_ip_matcher.py:

• Fetches latest CVEs from NVD API v2 (CVSS >= 6, configurable count)
• Loads hosts + services from MSF DB (port, name, banner)
• TF-IDF vectorization + cosine similarity CVE description/CPE vs banners
• GradientBoostingRegressor scores each (CVE, IP) pair 0-100
• Keyword match table (service name → CPE keywords) for boosting
• CLI: --cve, --cve-count, --top, --json, --importances
• Add psycopg2-binary to requirements

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

A	ml-threat/cve_ip_matcher.py
M	ml-threat/requirements.txt

Diff Summary

 ml-threat/cve_ip_matcher.py | 634 ++++++++++++++++++++++++++++++++++++++++++++
 ml-threat/requirements.txt  |   1 +
 2 files changed, 635 insertions(+)