mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-28 21:17:36 +00:00
CyberMind-FR
fedefd36a4
CLI (dry-run by default, --apply to write) orchestrates extract + presence + emit. Ships a small vendored Nuclei subset (MIT, with LICENSE) of appliance/KEV/ URL-extractable templates + an offline maintainer curation script. Adds python3-yaml to Depends. --apply refuses to write when the presence inventory is incomplete (fail-safe). Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
20 lines
981 B
Bash
Executable File
20 lines
981 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# SPDX-License-Identifier: LicenseRef-CMSD-1.0
|
|
# Copyright (c) 2026 CyberMind — Gérald Kerma <devel@cybermind.fr>
|
|
# Source-Disclosed License — All rights reserved except as expressly granted.
|
|
# See LICENCE-CMSD-1.0.md for terms.
|
|
|
|
# SecuBox-Deb :: curate-nuclei-subset — MAINTAINER-ONLY, offline, NOT runtime.
|
|
# Clones nuclei-templates and copies KEV + appliance-family + URL-extractable
|
|
# templates into nuclei-subset/. Run before a release to refresh the vendored
|
|
# set; the .deb ships the copies, the service never clones anything.
|
|
set -euo pipefail
|
|
readonly OUT="$(dirname "$0")/../nuclei-subset"
|
|
readonly TMP="$(mktemp -d)"
|
|
trap 'rm -rf "$TMP"' EXIT
|
|
|
|
git clone --depth 1 https://github.com/projectdiscovery/nuclei-templates "$TMP/nt"
|
|
echo "Review candidates by hand; copy the appliance/KEV/clean-path ones into $OUT."
|
|
echo "Vendors of interest: f5 paloaltonetworks ivanti citrix fortinet cisco vmware."
|
|
grep -rlE "kev" "$TMP/nt/http/cves" | head -50
|