There's a neat little CLI tool called CVE2PoC — you give it a CVE, it pulls public PoCs, NVD info, checks if there's an exploit on GitHub or in Metasploit, whether it showed up in bug bounty writeups, nuclei templates, that kind of stuff.
I forked it and added some functionality: search by tag (say, wordpress), by vulnerability type, by year, plus HTML/JSON report generation. Then wrapped it in a Telegram bot so it's actually convenient to use on the go.
Also built an auto-parser for blackhat-side news -
new malware, breaches, hacker and APT group arrests — pulling from around 60 sources (Krebs, ransomwatch, HN, etc). It sends a digest every few hours (can be turned off if you just want the CVE lookup part). Currently working on keyword-based filtering for the news feed too.
Would appreciate it if you gave it a try: https://t.me/cve2poc_bot
Repost if it's useful, and if you hit a bug, let me know, I'll fix it.
Top comments (0)