Made a Telegram bot that pulls CVE PoCs + tracks blackhat news

whiskeybob — Sun, 23 Aug 2026 13:13:20 +0000

There's a neat little CLI tool called CVE2PoC — you give it a CVE, it pulls public PoCs, NVD info, checks if there's an exploit on GitHub or in Metasploit, whether it showed up in bug bounty writeups, nuclei templates, that kind of stuff.

I forked it and added some functionality: search by tag (say, wordpress), by vulnerability type, by year, plus HTML/JSON report generation. Then wrapped it in a Telegram bot so it's actually convenient to use on the go.

Also built an auto-parser for blackhat-side news -
new malware, breaches, hacker and APT group arrests — pulling from around 60 sources (Krebs, ransomwatch, HN, etc). It sends a digest every few hours (can be turned off if you just want the CVE lookup part). Currently working on keyword-based filtering for the news feed too.

Would appreciate it if you gave it a try: https://t.me/cve2poc_bot

Repost if it's useful, and if you hit a bug, let me know, I'll fix it.

DEV Community: whiskeybob

Made a Telegram bot that pulls CVE PoCs + tracks blackhat news