vuln-ai-assistant

# 🔐 VulnAI Assistant - AI-Powered CVE Analysis Tool

**VulnAI Assistant** is a free, AI-powered vulnerability analysis tool that fetches CVE details from the National Vulnerability Database (NVD) and provides intelligent insights about impact, affected systems, exploitation risk, and remediation steps.

---

## ✨ Features

* 🔍 **Real-time CVE Lookup**: Fetches latest vulnerability data from NVD API
* 🤖 **AI-Powered Analysis**: Intelligent assessment of vulnerability impact
* 🎯 **Risk Scoring**: CVSS-based risk classification with detailed breakdown
* 🛡️ **Remediation Guidance**: Actionable mitigation steps
* 📊 **Multiple Output Formats**: Console, JSON, and HTML reports
* 💰 **100% Free**: No API keys or subscriptions required
* ⚡ **Fast & Lightweight**: Minimal dependencies, quick execution

---

## 🚀 Quick Start

### Prerequisites

* Python 3.8 or higher
* pip package manager
* Internet connection (for NVD API access)

### Installation

1. **Clone the repository**
```bash
git clone https://github.com/JuttSahib1999/vuln-ai-assistant.git
cd vuln-ai-assistant

```


2. **Install dependencies**
```bash
pip install -r requirements.txt

```


3. **Run the assistant**
```bash
python vuln_ai.py CVE-2021-44228

```



---

## 📖 Usage Examples

```bash
# Basic CVE lookup
python vuln_ai.py CVE-2021-44228

# Generate HTML report
python vuln_ai.py CVE-2021-44228 --output html

# Save results to JSON
python vuln_ai.py CVE-2021-44228 --output json --save results.json

# Quiet mode (minimal output)
python vuln_ai.py CVE-2021-44228 --quiet

# Batch analysis
python vuln_ai.py --batch cve_list.txt

```

---

## 📋 Sample Output

```text
╔══════════════════════════════════════════════════════════════╗
║             VulnAI Assistant - CVE Analysis                 ║
╚══════════════════════════════════════════════════════════════╝

[✓] CVE Found: CVE-2021-44228

📌 Basic Information:
   • Description: Apache Log4j2 JNDI features do not protect against...
   • Published Date: 2021-12-10
   • Last Modified: 2022-01-05

⚠️ Severity Analysis:
   • CVSS Score: 10.0 (CRITICAL)
   • Attack Vector: NETWORK
   • Attack Complexity: LOW
   • Privileges Required: NONE
   • User Interaction: NONE

🔬 AI Impact Assessment:
   [Detailed AI analysis here...]

🛡️ Remediation Steps:
   1. Update Log4j to version 2.17.0 or later
   2. Apply vendor patches immediately
   ...

```

---

## 🏗️ Architecture

```text
NVD API → Data Fetcher → AI Analyzer → Report Generator → Output

```

* **NVD Client**: Handles API communication with retry logic
* **AI Analyzer**: Processes vulnerability data using heuristic algorithms
* **Report Generator**: Creates formatted outputs (Console/JSON/HTML)

---

## 🤝 Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

---

## 👤 Author

* **Abdul Muqeet Tabraiz**
* LinkedIn: [abdul-muqeet-tabraiz](https://www.linkedin.com/in/abdul-muqeet-tabraiz/)
* GitHub: [JuttSahib1999](https://github.com/JuttSahib1999)

---

## 📄 License

This project is licensed under the **MIT License** - see the LICENSE file for details.

---

## 🙏 Acknowledgments

* National Vulnerability Database (NVD)
* Python community
* All open-source contributors

---

## ⭐ Star History

If you find this project useful, please consider giving it a star! ⭐

*Made with ❤️ by Abdul Muqeet Tabraiz*