FediVuln 0.1.0

A client to gather vulnerability-related information from the Fediverse.

FediVuln

A client to gather vulnerability-related information from the Fediverse.

Usage

Installation

$ pipx install FediVuln
$ export FEDIVULN_CONFIG=~/.FediVuln/conf.py

Set the configuration variables in conf.cfg as appropriate for your environment. An example is provided.

Register your application

$ poetry shell
$ FediVuln-Register

This script uses OAuth in order to retrieve the access token. This is achieved in several steps.

• Register the application with Mastodon instance, a including all necessary scopes
• Instantiate Mastodon client with client credentials
• Log in - Generate authorization URL with the exact same scopes
• Once the user authorizes, prompt for the authorization code
• Use the authorization code to retrieve the access token, with the same scopes

You only have to execute it once.

Streaming

$ poetry shell
$ FediVuln-Stream --user --sighting

Using the --sighting argument, detected vulnerability IDs will be recorded in Vulnerability Lookup as sightings.

Publishing

$ python publish.py

License

FediVuln is licensed under GNU General Public License version 3

Copyright (c) 2024 Computer Incident Response Center Luxembourg (CIRCL)
Copyright (C) 2024 Cédric Bonhomme - https://github.com/cedricbonhomme