ExploitRank is an automated Exploit Intelligence Engine (EIE) designed to ingest, normalize, and score vulnerabilities based on real-world exploit availability. It serves as the data backbone for the ZeroSignal security network, providing high-fidelity intelligence for both automated remediation and adversarial testing.

Multi-source adapter architecture for pulling raw vulnerability and exploit data:

• NVD Adapter: Ingests official CVE data including descriptions, CVSS scores, and timestamps.
• GitHub Adapter: Scans repositories for Proof-of-Concept (PoC) code and active exploits.
• Extensible Design: Support for additional sources like Exploit-DB or custom feeds.

Converts disparate raw data formats into a standardized VulnRecord and ExploitCandidate schema, ensuring consistency across the entire intelligence pipeline.

A proprietary scoring engine that calculates the Exploit Rank Score (0-100) by factoring in:

• CVSS Severity: Base technical impact.
• Exploit Availability: Weighting for PoCs vs. weaponized exploit modules.
• Vulnerability Recency: Prioritizing new and emerging threats.

Automatically generates structured Remediation Recipes in JSON format. These bundles include:

• Standardized vulnerability assessments.
• Remediation priority levels based on ERS.
• Contextual metadata for downstream automation runners.

Directly bridges with DarkPrompt (AI Adversarial Toolkit), allowing security audits to use real-world exploit data for generating targeted, high-fidelity attack payloads.

• Python 3.9+
• SQLAlchemy

git clone https://github.com/jason-allen-oneal/ExploitRank.git
cd ExploitRank
python3 -m venv venv
source venv/bin/activate
pip install -e .

eie ingest --nvd ./nvd_dump.json

eie score CVE-2024-9999

eie recipe CVE-2024-9999 --out ./recipes/

Licensed under the GNU Affero General Public License v3.0 or later (AGPL-3.0-or-later). See LICENSE for details.

“Intelligence without action is overhead; Action without intelligence is risk.” – ExploitRank provides the intelligence required for decisive action.

ExploitRank now includes a high-performance web interface and REST API for public intelligence distribution.

• FastAPI Backend: Located in api/. Provides standard REST endpoints for exploit discovery.
• Next.js Frontend: Located in web/. A modern, dark-themed dashboard for visualizing exploit trends and ERS scores.

To start the API:

python -m api.main

To start the web UI (dev):

cd web
npm install
npm run dev