fleet/tools/software/vulnerabilities

Note

Prefer dibble for seeding vulnerable software. The equivalent is:

./tools/dibble/dibble vulns --macos 100 --ubuntu 100 --windows 100

dibble embeds the same CSVs and writes to MySQL directly, just like this tool. This script is kept for backwards compatibility.

Vulnerability Data Seeder

The purpose of seed_vuln_data.go is to provide developers an easy way to insert hosts and software into your local development Fleet server without needing a real host or osquery-perf

Usage

1. Ensure your local development environment is running using docker-compose up and fleet serve

2. Optional: Review and modify the software titles in the following files in this folder:

   • software_macos.csv
   • software_ubuntu.csv
   • software_win.csv

   Comma seperated values align directly with the columns in the software table in MySQL

3. Run the data seeder

go run ./tools/software/vulnerabilities/seed_data/seed_vuln_data.go --ubuntu 1 --macos 1 --windows 1 --linux-kernels 1

You should now see new hosts with the configured software attached in the UI and database. This tool is idempotent as it will not create duplicate hosts or software titles if run multiple times, however it will not delete software if removed from the CSV files.