## https://sploitus.com/exploit?id=B98CCB97-1C54-58ED-B639-966A8996C337
# cve-exploit-mapper
Keyless CVE → exploit / PoC URL aggregator for authorized security research
(pentest engagements, CTFs, and personal labs).
Given a list of CVEs, it maps each one to publicly available exploit and
Proof-of-Concept URLs across several sources, plus CVSS severity — with no
API key and no third-party pip dependencies (pure Python stdlib).
## Sources
| Source | What it provides |
|--------------|--------------------------------------------------------------|
| Exploit-DB | Cached public CSV → CVE → EDB exploit page URLs |
| GitHub | Repo search for public PoCs (star-ranked) |
| Sploitus | Aggregated search (also surfaces Packet Storm / Metasploit) |
| Packet Storm | Best-effort (site is now JS-rendered; may return nothing) |
| NVD | CVSS base severity/score + short description |
| searchsploit | Used automatically if installed (optional) |
## Usage
```bash
# one or more CVEs, pretty terminal table (default)
python3 exploit_research.py CVE-2021-41773 CVE-2026-24061
# from a file (one CVE per line), write a markdown report
python3 exploit_research.py -f cves.txt --format md -o report.md
# CSV for spreadsheets
python3 exploit_research.py -f cves.txt --format csv -o results.csv
# raise GitHub rate limit (10/min -> 30/min) with a token
GITHUB_TOKEN=ghp_xxx python3 exploit_research.py -f cves.txt
```
### Options
```
--top N max PoCs per source (default 3)
--format table|md|csv output format (default table)
--no-github skip GitHub search
--no-sploitus skip Sploitus
--no-packetstorm skip Packet Storm
--no-nvd skip NVD lookup (faster)
-o FILE write to file instead of stdout
```
## Notes
- The Exploit-DB CSV is cached under `~/.cache/exploit_research/` and refreshed
weekly. To force a refresh: `rm ~/.cache/exploit_research/files_exploits.csv`
- Unauthenticated GitHub/Sploitus requests are rate-limited; the tool spaces
requests out automatically.
- **Public PoC code is untrusted.** Review every PoC before running it — fake,
broken, and malicious "PoCs" are common. Use only against systems you are
authorized to test.
## License
MIT