Using Python to Detect Vulnerabilities in Binaries
summary
A small open source scanner called CVE Binary Tool detects known vulnerabilities inside binary files by matching simple strings + grep signatures to extract version tokens, converting odd version letters (OpenSSL) into comparable numbers, and checking ranges against the NVD JSON parsing of CVEs. It outputs CSV/JSON output suitable for spreadsheets or CI, runs fast enough for routine scans, flags false positives for some libraries, and is actively extended by students and contributors.
AI-written summary · about
chapters (5)
- 0:00Start
- 14:51pip install cve-bin-tool CSV2cve list_of_components.csv
- 19:16Use it
- 20:19Add Checkers
- 21:23Mentor
related talks
39mSelect Bugs From Binary Where Pattern Like CVE-1337-Days
33mWhere is my Code Vulnerable: Matching CVEs and Source Code
32mWeaponizing Python for Good: Building a Next-Gen CVE Scanner That Detects Zero-Day Vulnerability
42mNavigating the Sea of CVEs: Securing Your Linux Distributions
40mOpen Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm
50mVerify your software for security bugs
35mKeeping Up with the CVEs: How to Find a Needle in a Haystack?
56mCVE Is The Worst Vulnerability Framework (Except For All The Others)