Dev.to Security 🔐 Cybersecurity Fri, 16 Oct 2026 21:36:34 +0000 👁 0 📖 2 min read

CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers

Author: Trix Cyrus [🔹 Follow] TrixSec GitHub [🔹 Join] TrixSec Telegram CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers A CLI tool that automates CVE triage, enriches vulne

Author: Trix Cyrus

[🔹 Follow] TrixSec GitHub

[🔹 Join] TrixSec Telegram

CVE Hunter: Automated CVE Triage & PoC Generator for Security Researchers

A CLI tool that automates CVE triage, enriches vulnerabilities with EPSS scores, and generates ready-to-use Proof of Concept scripts — all from a single command.

The Problem

Security researchers and penetration testers spend hours manually:

Searching NVD for relevant CVEs
Checking CVSS scores and EPSS exploit likelihood
Writing PoC scripts from scratch
Exporting findings into SARIF/JSON for CI/CD pipelines

CVE Hunter eliminates this friction. One tool. Four commands. Zero boilerplate.

Quick Start

# Install
pip install cve-hunter

# Search CVEs
cve-hunter search "Apache Log4j"

# Triage a specific CVE
cve-hunter triage CVE-2024-27115

# Generate a PoC
cve-hunter generate CVE-2024-27115 --output poc.py

# Watch for new critical CVEs
cve-hunter watch --interval 3600

Features

Feature	Description
🔍 CVE Search	Query NVD API with keyword or CVE ID
📊 Automated Triage	CVSS + EPSS enrichment with severity classification
🎯 PoC Generation	Auto-generates Python/HTTP exploit templates
📡 Live Monitoring	`watch` mode polls NVD for new critical CVEs
📤 Multi-Format Export	JSON, Markdown, or SARIF (GitHub Actions compatible)
✅ Type Safe	Full test suite with 10 passing unit tests

Architecture

┌─────────────────────────────────────────────────────┐
│                    cve-hunter CLI                    │
│  search │ triage │ generate │ watch                 │
└──────────────────┬──────────────────────────────────┘
                   │
    ┌──────────────┼──────────────┐
    ▼              ▼              ▼
┌────────┐   ┌──────────┐   ┌──────────┐
│ fetcher│   │ triage  │   │ poc_gen  │
│ NVD    │   │ CVSS+EPSS│   │ Templates│
│ GH Adm │   │ Scoring  │   │ SQLi/XSS │
└───┬────┘   └────┬─────┘   └────┬────┘
    │             │              │
    └─────────────┼──────────────┘
                  ▼
           ┌──────────┐
           │ reporter │
           │ JSON/MD/ │
           │ SARIF    │
           └──────────┘

Command Reference

Search CVEs

# Search by keyword
cve-hunter search "SQL Injection WordPress"

# Search by CVE ID
cve-hunter search CVE-2024-40111

Triage & Score

# Get full triage report
cve-hunter triage CVE-2024-27115

# Output in JSON
cve-hunter triage CVE-2024-27115 --format json

Generate PoC

# Generate exploit template
cve-hunter generate CVE-2024-27115

# Save to file
cve-hunter generate CVE-2024-27115 -o poc.py

# Specify language
cve-hunter generate CVE-2024-27115 --lang python
cve-hunter generate CVE-2024-27115 --lang http

Watch for New CVEs

# Poll every hour
cve-hunter watch --interval 3600

# Only critical severity
cve-hunter watch --severity critical

# Export to SARIF for CI/CD
cve-hunter watch --export sarif --output report.sarif

Why CVE Hunter?

Speed — Get from CVE ID to PoC in under 10 seconds
Accuracy — EPSS scores from first-party source
Workflow — SARIF export plugs into GitHub Actions Security
Open Source — MIT licensed, fully auditable

Installation

# From PyPI
pip install cve-hunter

# From source
git clone https://github.com/theexploiters/cve-hunter.git
cd cve-hunter
pip install -e .

License

MIT License — Free for commercial and personal use.

Repo: https://github.com/theexploiters/cve-hunter

Issues & PRs welcome. Star the repo if it saves you time.

~TrixSec

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.

← News 🔐 Cybersecurity 🏠 Home