diwskx/sploitscan repository overview

⁠SploitScan Modified Version

SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability.

⁠📦 About This Version

Modified custom build of the image from https://github.com/xaitax/SploitScan⁠

⁠🚀 New Features

• Added support for parsing CVEs from files in a directory
• Enhanced container compatibility
• Improved output handling

⁠🐳 Usage

⁠Basic Command

docker run --rm -it -v $(pwd)/trivy_reports:/input -v $(pwd):/results diwskx/sploitscan:latest --input-dir /input -e html

⁠With Custom Configuration (config.json in the startup directory on Host)

docker run --rm -it -v $(pwd)/trivy_reports:/input -v $(pwd):/results diwskx/sploitscan:latest --input-dir /input -e html -c /results/config.json

⁠📁 Volume Mapping

⁠⚙️ Parameters

• --input-dir /input - Specify input directory

• -e html - Export format (HTML)

• -c /results/config.json - Custom configuration file (optional)

⁠📊 A typical config.json might look like this:

{
    "vulncheck_api_key": "",
    "openai_api_key": "",
    "google_api_key": "",
    "grok_api_key": "",
    "deepseek_api_key": ""
}

⁠📋 Notes

• The container automatically processes all CVE files in the input directory

• Reports are saved to the mounted results directory

• Container is automatically removed after execution (--rm flag)

⁠🏗️ Building the Modified Image

git clone https://github.com/diwskx/SploitScan.git
cd SploitScan
docker build -t diwskx/sploitscan:latest .

⁠📝 License

Based on original SploitScan under GNU GPL v3 license. Modifications by diwskx.