Projects
The following are my projects and responsibilities at CERIAS:- The Ruxseedloader Project (for XCCDF and NIST's SCAP), on SourceForge; Jaxseedloader, Java translation of the same (by Jason Ortiz)
- The ReAssure Project
- The Cassandra System
- The Cooperative Vulnerability database
- The Incident Response Database
- Board of Editors of the CVE
- CERIAS liaison with the CCE effort
Helpful things (perhaps to someone, anyway):
- A simplified, command-line version of the Cassandra system, e.g., for personal use: Personal Cassandra for the National Vulnerability Database (NVD), under an open source license. After downloading change the extension from .phps to .php. It was tested on MacOS X and Windows XP. Windows XP users also need to download cassandra.bat and the latest version of PHP and unzip it so that the path to php.exe is C:\php\php.exe (no need to run an installer, just unzip). Here is an example profile.txt file, that you need to put in the same directory as my_cassandra.php.
NOTE: This tool only queries the NVD, and not Secunia. You may need to lookup the correct product and vendor names from the NVD itself. - An XML parser for the National Vulnerability Database (NVD), under an open source license.
- Tests for common attack vectors (i.e., client-side scripting technologies such as JavaScript, VBScript, ActiveX, Flash) in Web browsers
- Tunneling email through SSH
- The CVE database in MySQL format, updated every night from the CVE web site
- dir_pscan.php, a Pscan helper that automatically generates pscan custom function files and makes it recursively go through a project's source code. The Pscan web site
