CISA KEV corresponding exploits and Nuclei detection rules, filtered
Description
The study dataset consists of selected vulnerabilities from the Cybersecurity and Infrastructure Security Agency (CISA)'s Known Exploited Vulnerabilities (KEV) catalogue, along with corresponding detection rules and publicly available exploits. The dataset was curated through a series of filtering and enrichment steps to ensure relevance and consistency. The final collection includes 123 unique exploits mapped to 71 distinct Common Vulnerabilities and Exposures (CVEs), each accompanied by its respective Nuclei detection rule.
Files
Steps to reproduce
Initial Filtering: Vulnerabilities disclosed from 2020 onwards were selected, focusing exclusively on those with Network-based Attack Vectors according to their Common Vulnerability Scoring System (CVSS) classification. source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Detection Rule Validation: The filtered vulnerabilities were cross-referenced with detection rules available in Ostorlab's GitHub repository, retaining only those vulnerabilities with corresponding detection rules. source: https://github.com/Ostorlab/KEV/tree/main/nuclei Exploit Collection: For each of the selected vulnerabilities, the associated exploit code was retrieved. sources: https://packetstorm.news/, https://www.exploit-db.com/
Institutions
- NASK Instytut Badawczy