Skip to content

Commit 90e7919

Browse files
authored
Merge pull request #753 from jrecinsky-r7/patch-2
Refactor Rapid7 AttackerKB module version and details
2 parents fe7a7fc + b30be91 commit 90e7919

File tree

1 file changed

+20
-7
lines changed

1 file changed

+20
-7
lines changed

misp_modules/modules/expansion/rapid7_attackerkb.py

Lines changed: 20 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,28 @@
3232
"format": "misp_standard"
3333
}
3434
moduleinfo: dict[str, Any] = {
35-
"version": "48",
35+
"version": "1",
3636
"author": "R7 Labs",
37-
"description": "Enrich CVEs via AttackerKB and return structured MISP events. Handles rate limits, regex CVE detection, and markdown cleanup.",
37+
"name": "Rapid7 AttackerKB lookup",
38+
"description": "Module to lookup CVE attributes in Rapid7 AttackerKB.",
3839
"module-type": ["expansion", "hover"],
39-
"name": "r7_akb",
40-
"requirements": ["pymisp", "requests"],
41-
"input": "Vulnerability attribute (CVE ID or comment containing CVE).",
42-
"output": "Structured MISP Objects.",
43-
"logo": ""
40+
"logo": "rapid7.png",
41+
42+
"features": "The module takes a CVE attribute and queries Rapid7 AttackerKB to retrieve information about the vulnerability. It returns details such as the CVSS score, exploitability, attacker value, available references, Rapid7 analysis, and community assessments.",
43+
44+
"config": "api_key",
45+
46+
"input": "A vulnerability attribute containing a CVE ID, or a comment that includes one or more CVEs.",
47+
48+
"output": "Enriched information about the CVE, including:\n\nVulnerability description and link to Rapid7 AttackerKB topic\nCVSS base score\nAttacker value and exploitability ratings\nExternal references related to the CVE\nRapid7’s analysis (if available)\nCommunity assessments with contributor names, scores, and notes",
49+
50+
"references": [
51+
"https://attackerkb.com/"
52+
],
53+
54+
"requirements": [
55+
"A valid public Rapid7 AttackerKB API key https://api.attackerkb.com/v1/api-docs/docs"
56+
]
4457
}
4558

4659
# Global HTTP session (stateless re-use; not an application state container)

0 commit comments

Comments
 (0)