CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers

Author: Trix Cyrus [🔹 Follow] TrixSec GitHub [🔹 Join] TrixSec Telegram CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers A CLI tool that automates CVE triage, enriches vulnerabilities with EPSS scores, and generates ready-to-use Proof of Concept scripts — all from a single command. The Problem Security researchers and penetration testers spend hours manually: Searching NVD for relevant CVEs Checking CVSS scores and EPSS exploit likelihood Writing PoC scripts from scratch Exporting findings into SARIF/JSON for CI/CD pipelines CVE Hunter eliminates this friction. One tool. Four commands. Zero boilerplate. Quick Start # Install pip install cve-hunter # Search CVEs cve-hunter search "Apache Log4j" # Triage a specific CVE cve-hunter triage CVE-2024-27115 # Generate a PoC cve-hunter generate CVE-2024-27115 --output poc.py # Watch for new critical CVEs cve-hunter watch --interval 3600 Features Feature Description 🔍 CVE Search Query NVD API with keyword or CVE ID 📊 Automated Triage CVSS + EPSS enrichment with severity classification 🎯 PoC Generation Auto-generates Python/HTTP exploit templates 📡 Live Monitoring watch mode polls NVD for new critical CVEs 📤 Multi-Format Export JSON, Markdown, or SARIF (GitHub Actions compatible) ✅ Type Safe Full test suite with 10 passing unit tests Architecture ┌─────────────────────────────────────────────────────┐ │ cve-hunter CLI │ │ search │ triage │ generate │ watch │ └──────────────────┬──────────────────────────────────┘ │ ┌──────────────┼──────────────┐ ▼ ▼ ▼ ┌────────┐ ┌──────────┐ ┌──────────┐ │ fetcher│ │ triage │ │ poc_gen │ │ NVD │ │ CVSS+EPSS│ │ Templates│ │ GH Adm │ │ Scoring │ │ SQLi/XSS │ └───┬────┘ └────┬─────┘ └────┬────┘ │ │ │ └─────────────┼──────────────┘ ▼ ┌──────────┐ │ reporter │ │ JSON/MD/ │ │ SARIF │ └──────────┘ Command Reference Search CVEs # Search by keyword cve-hunter search "SQL Injection WordPress" # Search by CVE ID cve-hunter search CVE-2024-40111 Triage & Score # Get full triage report cve-hunter triage CVE-2024-27115 # Output in JSON cve-hunter triage CVE-2024-27115 --format json Generate PoC # Generate exploit template cve-hunter generate CVE-2024-27115 # Save to file cve-hunter generate CVE-2024-27115 -o poc.py # Specify language cve-hunter generate CVE-2024-27115 --lang python cve-hunter generate CVE-2024-27115 --lang http Watch for New CVEs # Poll every hour cve-hunter watch --interval 3600 # Only critical severity cve-hunter watch --severity critical # Export to SARIF for CI/CD cve-hunter watch --export sarif --output report.sarif Why CVE Hunter? Speed — Get from CVE ID to PoC in under 10 seconds Accuracy — EPSS scores from first-party source Workflow — SARIF export plugs into GitHub Actions Security Open Source — MIT licensed, fully auditable Installation # From PyPI pip install cve-hunter # From source git clone https://github.com/theexploiters/cve-hunter.git cd cve-hunter pip install -e . License MIT License — Free for commercial and personal use. Repo: https://github.com/theexploiters/cve-hunter Issues & PRs welcome. Star the repo if it saves you time. ~TrixSec