CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers
Author: Trix Cyrus
[🔹 Follow] TrixSec GitHub
[🔹 Join] TrixSec Telegram
CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers
A CLI tool that automates CVE triage, enriches vulnerabilities with EPSS scores, and generates ready-to-use Proof of Concept scripts — all from a single command.
The Problem
Security researchers and penetration testers spend hours manually:
- Searching NVD for relevant CVEs
- Checking CVSS scores and EPSS exploit likelihood
- Writing PoC scripts from scratch
- Exporting findings into SARIF/JSON for CI/CD pipelines
CVE Hunter eliminates this friction. One tool. Four commands. Zero boilerplate.
Quick Start
# Install pip install cve-hunter # Search CVEs cve-hunter search "Apache Log4j" # Triage a specific CVE cve-hunter triage CVE-2024-27115 # Generate a PoC cve-hunter generate CVE-2024-27115 --output poc.py # Watch for new critical CVEs cve-hunter watch --interval 3600 Features
| Feature | Description |
|---|---|
| 🔍 CVE Search | Query NVD API with keyword or CVE ID |
| 📊 Automated Triage | CVSS + EPSS enrichment with severity classification |
| 🎯 PoC Generation | Auto-generates Python/HTTP exploit templates |
| 📡 Live Monitoring | watch mode polls NVD for new critical CVEs |
| 📤 Multi-Format Export | JSON, Markdown, or SARIF (GitHub Actions compatible) |
| ✅ Type Safe | Full test suite with 10 passing unit tests |
Architecture
┌─────────────────────────────────────────────────────┐ │ cve-hunter CLI │ │ search │ triage │ generate │ watch │ └──────────────────┬──────────────────────────────────┘ │ ┌──────────────┼──────────────┐ ▼ ▼ ▼ ┌────────┐ ┌──────────┐ ┌──────────┐ │ fetcher│ │ triage │ │ poc_gen │ │ NVD │ │ CVSS+EPSS│ │ Templates│ │ GH Adm │ │ Scoring │ │ SQLi/XSS │ └───┬────┘ └────┬─────┘ └────┬────┘ │ │ │ └─────────────┼──────────────┘ ▼ ┌──────────┐ │ reporter │ │ JSON/MD/ │ │ SARIF │ └──────────┘ Command Reference
Search CVEs
# Search by keyword cve-hunter search "SQL Injection WordPress" # Search by CVE ID cve-hunter search CVE-2024-40111 Triage & Score
# Get full triage report cve-hunter triage CVE-2024-27115 # Output in JSON cve-hunter triage CVE-2024-27115 --format json Generate PoC
# Generate exploit template cve-hunter generate CVE-2024-27115 # Save to file cve-hunter generate CVE-2024-27115 -o poc.py # Specify language cve-hunter generate CVE-2024-27115 --lang python cve-hunter generate CVE-2024-27115 --lang http Watch for New CVEs
# Poll every hour cve-hunter watch --interval 3600 # Only critical severity cve-hunter watch --severity critical # Export to SARIF for CI/CD cve-hunter watch --export sarif --output report.sarif Why CVE Hunter?
- Speed — Get from CVE ID to PoC in under 10 seconds
- Accuracy — EPSS scores from first-party source
- Workflow — SARIF export plugs into GitHub Actions Security
- Open Source — MIT licensed, fully auditable
Installation
# From PyPI pip install cve-hunter # From source git clone https://github.com/theexploiters/cve-hunter.git cd cve-hunter pip install -e . License
MIT License — Free for commercial and personal use.
Repo: https://github.com/theexploiters/cve-hunter
Issues & PRs welcome. Star the repo if it saves you time.
~TrixSec