trickest/cve

trickest/cve has 8,190 GitHub stars and 983 forks. GitHot measured +4 stars in 24 hours and +17 in 7 days. Last checked 2026-11-06 16:38 UTC. Last push 2026-10-16.

这些数字如何统计

收集并更新所有可用的 CVE 及其 PoC，包括最新的 CVE。

8,190 星标 983 forks +4 24小时

实测星标增长

24小时: +4
7天: +17
15天: 正在收集历史
1个月: 正在收集历史

各周期内的星标净变化，周期相互重叠，并非每日新增。缺失的测量保持空白。星标代表关注度，不代表软件质量。

README.md

原文

CVE PoC

Almost every publicly available CVE PoC.

Current hottest CVEs

Title	URL
CVE-2022-0001	/trickest/cve/blob/main/2022/CVE-2022-0001.md
CVE-2022-25297	/trickest/cve/blob/main/2022/CVE-2022-25297.md
CVE-2022-1388	/trickest/cve/blob/main/2022/CVE-2022-1388.md
CVE-2022-25451	/trickest/cve/blob/main/2022/CVE-2022-25451.md

To see the complete history go here

How it works

Trickest Workflow Architecture

Trickest Workflow - PoC

TB; DZ (Too big; didn't zoom):

Collect CVE details from cvelist (Shout out to CVE Project!)
Split CVEs up by year.
Find PoCs for each CVE using 2 techniques:
1. References
  - Gather each CVE's References.
  - Check if any of them points to a PoC using ffuf and a list of keywords
  Regex: (?i)[^a-z0-9]+(poc|proof of concept|proof[-_]of[-_]concept)[^a-z0-9]+
  
  (Thanks @joohoi!)
  
  Note: ffuf is awesome for more purposes than just content discovery.
  
  Get CVE referenced in HackerOne Reports - AllVideoPocsFromHackerOne (Thanks @zeroc00I!)
2. Github
  
  Search GitHub for repositories with find-gh-poc that mention the CVE ID.
Merge the fresh results into the repository without overwriting the data that was committed manually.
Filter false positives using blacklist.txt.
Merge all of the found PoCs.
Generate GitHub badges for each affected software version using shields.io.
Write everything into easy-to-read markdown files.

As described, almost everything in this repository is generated automatically. We carefully designed the workflow (and continue to develop it) to ensure the results are as accurate as possible.

Use cases

Browse around, find a nice PoC, and test away!
Watch the repository to receive notifications about new PoCs as soon as they go public.
Search for a specific product(s) (and possibly version) to find all public exploits related to it.
Monitor the atom feed for a specific product(s).
Create a searchable HTML table using the template and script in summary_html
- Example: https://www.andrewmohawk.com/cve_summary (Thanks @AndrewMohawk!)

Contribution

All contribtutions/ideas/suggestions are welcome! Create a new ticket via GitHub issues or tweet at us @trick3st.

Build your own workflows

We believe in the value of tinkering; cookie-cutter solutions rarely cut it. Sign up for a Trickest demo to customize this workflow to your use case, get access to many more workflows, or build your own workflows from scratch!