infobyte / infobyte/faraday_plugins
Missing severity when using shodan search with the faraday-cli
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 61
- Forks
- 22
- PR merge metrics
- No merged PRs in 30d
Description
Hi,
after running "shodan search net:a.b.c.d" in faraday-cli I get all data including ip,hostname,CVE, description,etc in my faraday database.
But why is the severity and CVSS (don't need it) missing? All vulnerabilties have a CVE number but severity is always "info" and no CVSS.
I am using shodan search with "--fields vuln" but it doesnt make a difference.
I know from using search with shodan-cli directly that the xyz.json.gz file contains severity and CVSS.
faraday-cli version 2.2.1
faraday-plugins version 1.27.2
Thanks for any help.
Regards
Sven
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing shodan search net:a.b.c.d --fields vuln with faraday-cli 2.2.1 and inspect the Shodan report parser in this repository. Trace how the JSON data is mapped into Faraday vulnerabilities, especially the severity and CVSS fields, and compare it with the fields present in Shodan's xyz.json.gz. Done means CVE findings retain their reported severity instead of defaulting to info.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 50/100