Code · Stephen Shaffer

Code

Pipelines, datasets and notebooks that run on a schedule. All open source.

Maintained

github.com/t0sche/cvss-bt

Enriches the NVD’s CVSS base scores with Temporal and Threat metrics, resolving exploit-code maturity from CISA KEV, VulnCheck KEV, EPSS, Metasploit, Nuclei, ExploitDB and GitHub.
A fresh CSV publishes daily.

Maintained

github.com/t0sche/exploit_hazard_model

Reference implementation of the local exploit hazard model: the notebooks behind the arXiv paper.
Beta-Binomial control inference, Weibull hazard fitting, and remediation-plan simulation, end to end.

Elsewhere

Everything else lives on GitHub.

Profile

github.com/t0sche

Contact

Community

FIRST EPSS SIG