Made a Telegram bot that pulls CVE PoCs + tracks blackhat news
There's a neat little CLI tool called CVE2PoC — you give it a CVE, it pulls public PoCs, NVD info, checks if there's an exploit on GitHub or in Metasploit, whether it showed up in bug bounty writeups, nuclei templates, that kind of stuff. I forked it and added some functionality: search by tag (say, wordpress), by vulnerability type, by year, plus HTML/JSON report generation. Then wrapped it in a…
A CLI tool named CVE2PoC allows users to input a Common Vulnerabilities and Exposures (CVE) and retrieve public proof-of-concepts (PoCs), National Vulnerability Database (NVD) information, and checks for the presence of exploits on GitHub or Metasploit. The tool also scans for mentions in bug bounty write-ups and Nuclei templates.
The creator of CVE2PoC has expanded its capabilities by adding functionality to search by tags, vulnerability type, and year. The tool can now generate HTML and JSON reports. Furthermore, the developer wrapped CVE2PoC in a Telegram bot, making it convenient to use on the go.
Additionally, the developer has created an auto-parser to filter news from around 60 sources, including Krebs, ransomwatch, Hacker News, and more. These sources cover new malware, data breaches, arrests of hackers and APT groups. The bot sends a digest with curated news every few hours, which can be turned off if only the CVE lookup feature is desired. The developer is currently working on implementing keyword-based filtering for the news feed.
For those interested in trying the bot, it can be accessed through the following link: https://t.me/cve2poc_bot. The developer encourages reposting if the bot is found useful and requests feedback regarding any bugs encountered.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
