Tyr - get-cpe

Installation

cargo install get-cpe

Purpose

This command utility allows to run some queries on https://services.nvd.nist.gov/rest/json/cpes/2.0.

Usage

To explore all options run get-cpe help.

To get the CWE description:

$ get-cpe id --type soft --vendor microsoft --product office --version 2013 --update sp1
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*

For searching the list of CPE that are corresponding to a keywords:

$ get-cpe search microsoft
...
CPE
 id: cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.6218:*:*:*:*:x86:*:*
 type: os
 vendor: microsoft
 product: windows_10_21h2
 version: 10.0.19044.6218
 edition: *
 update: *
 language: *
 ...

NVD api key

It's possible to set a NVD API KEY by setting your key with the NVD_API_KEY environment variable.

Other tool

This tool can be used with get-cve tool to retrieve list of fixed CVE for an installed product. To get more information about get-cve search get-cve on the https://crates.io website for the same author.

Authors and acknowledgment

Help will be appreciated. All tools will be developed with rust technology.

License

This project is under MIT license.

Project status

This project is under development and all contributions are welcome.

These tools are provided without any guaranties.