48 lines
1.2 KiB
Markdown
48 lines
1.2 KiB
Markdown
---
|
|
title: "[bojemoi] feat(ml-threat): add CVE/IP matcher pipeline with scikit-learn"
|
|
date: 2026-07-05T23:41:35+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 12f83f3 par grafana-watcher dans bojemoi"
|
|
author: "grafana-watcher"
|
|
---
|
|
|
|
## Commit `12f83f3`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | grafana-watcher |
|
|
| **Hash** | `12f83f31a972c45703bc6d31e7e8bd838334f059` |
|
|
|
|
|
|
### Description
|
|
|
|
New script cve_ip_matcher.py:
|
|
- Fetches latest CVEs from NVD API v2 (CVSS >= 6, configurable count)
|
|
- Loads hosts + services from MSF DB (port, name, banner)
|
|
- TF-IDF vectorization + cosine similarity CVE description/CPE vs banners
|
|
- GradientBoostingRegressor scores each (CVE, IP) pair 0-100
|
|
- Keyword match table (service name → CPE keywords) for boosting
|
|
- CLI: --cve, --cve-count, --top, --json, --importances
|
|
- Add psycopg2-binary to requirements
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
A ml-threat/cve_ip_matcher.py
|
|
M ml-threat/requirements.txt
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
ml-threat/cve_ip_matcher.py | 634 ++++++++++++++++++++++++++++++++++++++++++++
|
|
ml-threat/requirements.txt | 1 +
|
|
2 files changed, 635 insertions(+)
|
|
```
|