Author: Trix Cyrus
[πΉ Follow] TrixSec GitHub
[πΉ Join] TrixSec Telegram
CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers
A CLI tool that automates CVE triage, enriches vulnerabilities with EPSS scores, and generates ready-to-use Proof of Concept scripts β all from a single command.
The Problem
Security researchers and penetration testers spend hours manually:
- Searching NVD for relevant CVEs
- Checking CVSS scores and EPSS exploit likelihood
- Writing PoC scripts from scratch
- Exporting findings into SARIF/JSON for CI/CD pipelines
CVE Hunter eliminates this friction. One tool. Four commands. Zero boilerplate.
Quick Start
# Install
pip install cve-hunter
# Search CVEs
cve-hunter search "Apache Log4j"
# Triage a specific CVE
cve-hunter triage CVE-2024-27115
# Generate a PoC
cve-hunter generate CVE-2024-27115 --output poc.py
# Watch for new critical CVEs
cve-hunter watch --interval 3600
Features
| Feature | Description |
|---|---|
| π CVE Search | Query NVD API with keyword or CVE ID |
| π Automated Triage | CVSS + EPSS enrichment with severity classification |
| π― PoC Generation | Auto-generates Python/HTTP exploit templates |
| π‘ Live Monitoring |
watch mode polls NVD for new critical CVEs |
| π€ Multi-Format Export | JSON, Markdown, or SARIF (GitHub Actions compatible) |
| β Type Safe | Full test suite with 10 passing unit tests |
Architecture
βββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β cve-hunter CLI β
β search β triage β generate β watch β
ββββββββββββββββββββ¬βββββββββββββββββββββββββββββββββββ
β
ββββββββββββββββΌβββββββββββββββ
βΌ βΌ βΌ
ββββββββββ ββββββββββββ ββββββββββββ
β fetcherβ β triage β β poc_gen β
β NVD β β CVSS+EPSSβ β Templatesβ
β GH Adm β β Scoring β β SQLi/XSS β
βββββ¬βββββ ββββββ¬ββββββ ββββββ¬βββββ
β β β
βββββββββββββββΌβββββββββββββββ
βΌ
ββββββββββββ
β reporter β
β JSON/MD/ β
β SARIF β
ββββββββββββ
Command Reference
Search CVEs
# Search by keyword
cve-hunter search "SQL Injection WordPress"
# Search by CVE ID
cve-hunter search CVE-2024-40111
Triage & Score
# Get full triage report
cve-hunter triage CVE-2024-27115
# Output in JSON
cve-hunter triage CVE-2024-27115 --format json
Generate PoC
# Generate exploit template
cve-hunter generate CVE-2024-27115
# Save to file
cve-hunter generate CVE-2024-27115 -o poc.py
# Specify language
cve-hunter generate CVE-2024-27115 --lang python
cve-hunter generate CVE-2024-27115 --lang http
Watch for New CVEs
# Poll every hour
cve-hunter watch --interval 3600
# Only critical severity
cve-hunter watch --severity critical
# Export to SARIF for CI/CD
cve-hunter watch --export sarif --output report.sarif
Why CVE Hunter?
- Speed β Get from CVE ID to PoC in under 10 seconds
- Accuracy β EPSS scores from first-party source
- Workflow β SARIF export plugs into GitHub Actions Security
- Open Source β MIT licensed, fully auditable
Installation
# From PyPI
pip install cve-hunter
# From source
git clone https://github.com/theexploiters/cve-hunter.git
cd cve-hunter
pip install -e .
License
MIT License β Free for commercial and personal use.
Repo: https://github.com/theexploiters/cve-hunter
Issues & PRs welcome. Star the repo if it saves you time.
~TrixSec
