Overview

FAV/E (Find a Vulnerability/Exposure) is a reconnaissance tool that maps detected software versions to known CVEs. Given a target’s technology stack, it queries vulnerability databases and returns a prioritized list of applicable CVEs.

The goal is to reduce the time spent manually cross-referencing software versions against NVD, exploit-db, and vendor advisories during the initial phases of an assessment.

Use Case

During penetration tests and bug bounty reconnaissance, identifying the exact software versions running on a target is only half the problem. The other half is efficiently determining which known vulnerabilities apply to those specific versions.

FAV/E automates this mapping step.

Source

Available on GitHub: github.com/un4gi/FAV-E

Status

Initial release. Feature requests and contributions welcome via GitHub issues.