cve test suite: Add a download script

This commit is contained in:
Daniel Marjamäki 2018-10-06 11:36:54 +02:00
parent 54c5d09ed3
commit 39df519af9
1 changed files with 31 additions and 0 deletions

31
cve-test-suite/download.sh Executable file
View File

@ -0,0 +1,31 @@
#!/bin/bash
# Fetch CVE issues that are interesting to look at
echo "CVE" > cve.txt
for i in `seq 1 20`;
do
echo "page $i"
# CVE 119 issues:
# https://www.cvedetails.com/vulnerability-list/cweid-119/vulnerabilities.html
# Use curl to get page $i:
curl -s "https://www.cvedetails.com/vulnerability-list.php?vendor_id=0&product_id=0&version_id=0&page=$i&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=119&order=1&trc=11185&sha=a76f56dbb935840fc028b135d550322223547356" > v.html
# for each cve:
for cve in $(grep /cve/CVE-2018- v.html | sed 's|.*/cve/CVE-2018-\([0-9]*\).*|CVE-2018-\1|'); do
echo "$cve" >> cve.txt
curl -s "https://www.cvedetails.com/cve/$cve/" > download-cve
# cve type
cat download-cve | grep '>Overflow<' >> cve.txt
# is there a code reference?
cat download-cve | grep 'https*://.*[a-f0-9]\{30,50\}' | sed 's|.*\(https*://[^ ]*[a-f0-9]\{30,\}\).*|\1|' >> cve.txt
# is there a pull request reference?
cat download-cve | grep 'https*://github.com/[^ ]*/pull/' | sed 's|.*\(https*://github.com/[^ ]*\).*|\1|' >> cve.txt
done
done
rm v.html
rm download-cve