cve-poc-mon

What this is

GitHub CVE Proof of Concept scraper, deployed with GitHub actions to fetch and clone any newly published CVE PoCs matching the format of cve-<current_year>, into the pocs/ directory.

You can find the live version hosted at https://heqnx.com/cve and a simple RSS feed at https://heqnx.com/cve/feed.xml

Run it yourself

Compile cve-poc-mon from the src/ directory with either go build, make for all targets, or make <target> for a specific target (e.g., make linux-amd64).

Cleanup steps for multiple binary blobs commited

• check blobs

git rev-list --objects --all | git cat-file --batch-check='%(objecttype) %(objectname) %(objectsize) %(rest)' | awk '$1 == "blob" && $3 > 100000' | sort -k3nr

• remove blobs

git filter-repo --invert-paths --path cve-poc-mon

• expire reflogs, gc

git reflog expire --expire=now --all

• force-push to remote repo

git push origin --force --all