Skip to content

Commit b30be91

Browse files
authored
Refactor Rapid7 AttackerKB module version and details
Updated module version and improved documentation for Rapid7 AttackerKB lookup.
1 parent d10b2bf commit b30be91

1 file changed

Lines changed: 20 additions & 7 deletions

File tree

misp_modules/modules/expansion/rapid7_attackerkb.py

Lines changed: 20 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,28 @@
3232
"format": "misp_standard"
3333
}
3434
moduleinfo: dict[str, Any] = {
35-
"version": "48",
35+
"version": "1",
3636
"author": "R7 Labs",
37-
"description": "Enrich CVEs via AttackerKB and return structured MISP events. Handles rate limits, regex CVE detection, and markdown cleanup.",
37+
"name": "Rapid7 AttackerKB lookup",
38+
"description": "Module to lookup CVE attributes in Rapid7 AttackerKB.",
3839
"module-type": ["expansion", "hover"],
39-
"name": "r7_akb",
40-
"requirements": ["pymisp", "requests"],
41-
"input": "Vulnerability attribute (CVE ID or comment containing CVE).",
42-
"output": "Structured MISP Objects.",
43-
"logo": ""
40+
"logo": "rapid7.png",
41+
42+
"features": "The module takes a CVE attribute and queries Rapid7 AttackerKB to retrieve information about the vulnerability. It returns details such as the CVSS score, exploitability, attacker value, available references, Rapid7 analysis, and community assessments.",
43+
44+
"config": "api_key",
45+
46+
"input": "A vulnerability attribute containing a CVE ID, or a comment that includes one or more CVEs.",
47+
48+
"output": "Enriched information about the CVE, including:\n\nVulnerability description and link to Rapid7 AttackerKB topic\nCVSS base score\nAttacker value and exploitability ratings\nExternal references related to the CVE\nRapid7’s analysis (if available)\nCommunity assessments with contributor names, scores, and notes",
49+
50+
"references": [
51+
"https://attackerkb.com/"
52+
],
53+
54+
"requirements": [
55+
"A valid public Rapid7 AttackerKB API key https://api.attackerkb.com/v1/api-docs/docs"
56+
]
4457
}
4558

4659
# Global HTTP session (stateless re-use; not an application state container)

0 commit comments

Comments
 (0)