trickest/cve
Cve
This project is a vulnerability intelligence database and aggregator that organizes common vulnerabilities and exposures alongside their corresponding proof-of-concept exploit code. It functions as a security vulnerability tracker and an indexed directory of public exploit payloads.
The system monitors new security flaws and updates to known exploits through repository watches and atom feeds. It utilizes automated aggregation to collect vulnerability details from centralized repositories and discovers associated exploit code via reference analysis and global searches.
The tool provides capabilities for product-specific exploit searching by matching software names and version strings. It also includes utilities for generating searchable HTML tables of vulnerabilities using templates and organizing security records within a yearly-indexed directory structure.
Features
- CVE Vulnerability Aggregators - Provides a comprehensive collection of common vulnerabilities and exposures linked to their corresponding proof-of-concept exploit code.
- Exploit Proof-of-Concept Indexes - Provides a curated, yearly-indexed directory of known security flaws and their associated proof-of-concept exploit payloads.
- Automated Exploit Collectors - Automatically collects flaw details and discovers associated proof-of-concept exploits through reference analysis.
- CVE Exploit Trackers - Monitors public repositories and feeds to find functional exploit code for specific CVE identifiers.
- PoC Discovery Tools - Finds exploit code by analyzing external links and performing global searches across vulnerability databases.
- Automated Aggregators - Implements automated aggregation to collect vulnerability details from centralized repositories.
- Exploit Proof-of-Concept Indices - Ships a searchable directory of public exploit payloads and vulnerability proofs organized by product and year.
- Security Vulnerability Trackers - Tracks new security flaws and updates to known exploits via feeds and repository watches.
- Vulnerability Research and Analysis - Tracks and aggregates new security flaws and their associated proof-of-concept exploits for security analysis.
- Vulnerability Databases - Maintains a curated reference of software security flaws used by researchers to identify and test vulnerabilities.
- Threat Intelligence Resources - Maintains a curated index of known vulnerabilities and product exploits to identify system risks.
- Vulnerability Intelligence Feeds - Monitors atom feeds and repository watches to track new security flaws in real-time.
- Vulnerability Monitoring Systems - Monitors centralized repositories of security flaws and exploits via repository watches or atom feeds.
- Exploit Reference Aggregators - Collects security flaw details and exploit references into a centralized, searchable format for researchers.
- PoC Update Trackers - Tracks updates to public proofs-of-concept for specific products via repository notifications or atom feeds.
- Product-Specific Exploit Search - Provides a search utility to locate public exploits for specific software products and versions.
- Exploit Version Filters - Locates specific exploits by matching software names and version strings against a curated index.
- Penetration Testing Resources - Provides a searchable index of proof-of-concept code to help prepare for penetration testing.
- Internet Asset Discovery - Gather and update all available and newest CVEs with their PoC
- Exploit Proofs of Concept - Collection of CVE-based vulnerability exploits.
- Penetration Testing - Daily updated list of CVE proof of concept exploits.
- Security Tools - Listed in the “Security Tools” section of the Awesome Hacking awesome list.
