{"id":225,"date":"2013-05-09T14:40:29","date_gmt":"2013-05-09T14:40:29","guid":{"rendered":"http:\/\/securityroots.com\/blog\/?p=225"},"modified":"2013-11-24T16:23:13","modified_gmt":"2013-11-24T16:23:13","slug":"vulndb-api-update-new-vulndb-help-site","status":"publish","type":"post","link":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/","title":{"rendered":"VulnDB API update + new VulnDB Help site"},"content":{"rendered":"<p>We have improved VulnDB API and have a new (and better) Help site. Read on to find out more about these changes.<\/p>\n<p><a href=\"http:\/\/vulndbhq.com\/\">VulnDB HQ<\/a> is a tool to manage your vulnerability descriptions so you can reuse them across reports. It also lets you create and share testing methodologies so <a href=\"http:\/\/securityroots.com\/blog\/2013\/01\/using-testing-methodologies-to-ensure\/\">every project is delivered to the same high quality standard<\/a>.<\/p>\n<p><a href=\"http:\/\/vulndbhq.com\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" alt=\"The VulnDB logo\" src=\"http:\/\/vulndbhq.com\/assets\/logo.png\" width=\"416\" height=\"256\" \/><\/a><\/p>\n<p>We have recently migrated the VulnDB Help site to a new location at:<\/p>\n<p style=\"text-align: center; font-size: 15px;\"><a href=\"http:\/\/vulndbhq.com\/help\/\">http:\/\/vulndbhq.com\/help\/<\/a><\/p>\n<p>Apart from the new look &amp; feel (which we hope you like) we&#8217;ve made a few significant improvements in the API itself:<\/p>\n<h2>Strict SSL requirement<\/h2>\n<p>The API was accessible over plain-text HTTP due to a misconfiguration, we have completely disabled this.<\/p>\n<h2>Token-based authentication<\/h2>\n<p>Say your goodbyes to HTTP Basic authentication and welcome the new token-based authentication overlords.<\/p>\n<p>Visit your Profile page to get your own API token which can be used to authenticate API request by means of a custom HTTP header.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" alt=\"A screenshot of the section of the Profile page showing the token\" src=\"http:\/\/vulndbhq.com\/help\/img\/api_token.png\" width=\"625\" \/><\/p>\n<p>Lost your token or you suspect it was compromised? Want to deny access to your account to all 3rd party applications? Regenerate your token and you are good to go.<\/p>\n<h2>Better examples<\/h2>\n<p>We&#8217;ve improved the examples for each of the API methods with a proof-of-concept `curl` request along with the sample of any data that has to be submitted to the request. We also show response codes and content returned by the server so you know what to expect.<\/p>\n<h2>tl; dr;<\/h2>\n<p>Find answers to your VulnDB API questions at <a href=\"http:\/\/vulndbhq.com\/help\/\">http:\/\/vulndbhq.com\/help\/<\/a><\/p>\n<p>Note that we have not bumped the version number to introduce these changes. This is because the main interfaces, media formats, end points and data types have not changed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We have improved VulnDB API and have a new (and better) Help site. Read on to find out more about these changes. VulnDB HQ is a tool to manage your vulnerability descriptions so you can reuse them across reports. It also lets you create and share testing methodologies so every project is delivered to the [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[6],"tags":[],"class_list":["post-225","post","type-post","status-publish","format-standard","hentry","category-vulndbhq"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>VulnDB API update: token-based auth and better docs<\/title>\n<meta name=\"description\" content=\"We hav eimproved the VulnDB API with token-based auth and strict SSL. We&#039;ve also updated the API docs with curl examples, response codes, return values...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VulnDB API update: token-based auth and better docs\" \/>\n<meta property=\"og:description\" content=\"We hav eimproved the VulnDB API with token-based auth and strict SSL. We&#039;ve also updated the API docs with curl examples, response codes, return values...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/\" \/>\n<meta property=\"og:site_name\" content=\"Dradis Framework Blog\" \/>\n<meta property=\"article:published_time\" content=\"2013-05-09T14:40:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2013-11-24T16:23:13+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/vulndbhq.com\/assets\/logo.png\" \/>\n<meta name=\"author\" content=\"Daniel Martin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@dradisfw\" \/>\n<meta name=\"twitter:site\" content=\"@dradisfw\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel Martin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/\",\"url\":\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/\",\"name\":\"VulnDB API update: token-based auth and better docs\",\"isPartOf\":{\"@id\":\"https:\/\/dradis.com\/blog\/#website\"},\"datePublished\":\"2013-05-09T14:40:29+00:00\",\"dateModified\":\"2013-11-24T16:23:13+00:00\",\"author\":{\"@id\":\"https:\/\/dradis.com\/blog\/#\/schema\/person\/0d7332083eed49c91ddf883f46f0dc52\"},\"description\":\"We hav eimproved the VulnDB API with token-based auth and strict SSL. We've also updated the API docs with curl examples, response codes, return values...\",\"breadcrumb\":{\"@id\":\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dradis.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"VulnDB API update + new VulnDB Help site\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dradis.com\/blog\/#website\",\"url\":\"https:\/\/dradis.com\/blog\/\",\"name\":\"Dradis Framework Blog\",\"description\":\"Information management for security teams\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dradis.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/dradis.com\/blog\/#\/schema\/person\/0d7332083eed49c91ddf883f46f0dc52\",\"name\":\"Daniel Martin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dradis.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a399ecf880d900a7e6eda70a86854a717956e937911a1565885959abe6afbdcf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a399ecf880d900a7e6eda70a86854a717956e937911a1565885959abe6afbdcf?s=96&d=mm&r=g\",\"caption\":\"Daniel Martin\"},\"sameAs\":[\"http:\/\/securityroots.com\/story.html\"],\"url\":\"https:\/\/dradis.com\/blog\/author\/etd\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"VulnDB API update: token-based auth and better docs","description":"We hav eimproved the VulnDB API with token-based auth and strict SSL. We've also updated the API docs with curl examples, response codes, return values...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/","og_locale":"en_US","og_type":"article","og_title":"VulnDB API update: token-based auth and better docs","og_description":"We hav eimproved the VulnDB API with token-based auth and strict SSL. We've also updated the API docs with curl examples, response codes, return values...","og_url":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/","og_site_name":"Dradis Framework Blog","article_published_time":"2013-05-09T14:40:29+00:00","article_modified_time":"2013-11-24T16:23:13+00:00","og_image":[{"url":"http:\/\/vulndbhq.com\/assets\/logo.png"}],"author":"Daniel Martin","twitter_card":"summary_large_image","twitter_creator":"@dradisfw","twitter_site":"@dradisfw","twitter_misc":{"Written by":"Daniel Martin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/","url":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/","name":"VulnDB API update: token-based auth and better docs","isPartOf":{"@id":"https:\/\/dradis.com\/blog\/#website"},"datePublished":"2013-05-09T14:40:29+00:00","dateModified":"2013-11-24T16:23:13+00:00","author":{"@id":"https:\/\/dradis.com\/blog\/#\/schema\/person\/0d7332083eed49c91ddf883f46f0dc52"},"description":"We hav eimproved the VulnDB API with token-based auth and strict SSL. We've also updated the API docs with curl examples, response codes, return values...","breadcrumb":{"@id":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dradis.com\/blog\/2013\/05\/vulndb-api-update-new-vulndb-help-site\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dradis.com\/blog\/"},{"@type":"ListItem","position":2,"name":"VulnDB API update + new VulnDB Help site"}]},{"@type":"WebSite","@id":"https:\/\/dradis.com\/blog\/#website","url":"https:\/\/dradis.com\/blog\/","name":"Dradis Framework Blog","description":"Information management for security teams","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dradis.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/dradis.com\/blog\/#\/schema\/person\/0d7332083eed49c91ddf883f46f0dc52","name":"Daniel Martin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dradis.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a399ecf880d900a7e6eda70a86854a717956e937911a1565885959abe6afbdcf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a399ecf880d900a7e6eda70a86854a717956e937911a1565885959abe6afbdcf?s=96&d=mm&r=g","caption":"Daniel Martin"},"sameAs":["http:\/\/securityroots.com\/story.html"],"url":"https:\/\/dradis.com\/blog\/author\/etd\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p3ijVs-3D","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts\/225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/comments?post=225"}],"version-history":[{"count":1,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts\/225\/revisions"}],"predecessor-version":[{"id":468,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts\/225\/revisions\/468"}],"wp:attachment":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/media?parent=225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/categories?post=225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/tags?post=225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}