## https://sploitus.com/exploit?id=BE6B546E-3E3F-599F-B8CE-1A4D445D583A
# 🛡️ POC Management Platform
Local POC/EXP Management Platform: Multi-dimensional filtering + display of vulnerability POC code and FOFA statements + visual data overview + manual addition of new POCs.
## ✨ Features
- **📊 Data Overview**: Statistics cards (Total POCs / FOFA Coverage / Includes Images) + Chart.js visualizations (Severity Level Pie Chart, Top 10 Vulnerability Types Bar Chart), which update in real-time based on filter selections
- **🔍 Multi-dimensional Filtering**: Tags (multiple selections) / Vulnerability Type / Severity Level / Time Range / Keyword Search; statistics update in real time based on filter selections
- **🖥️ Dual Views**: Table List / Card Waterfall View; freely switchable with infinite scrolling
- **📄 Detail Drawer**: POC code syntax highlighting + one-click copy; FOFA statement copy + jump to FOFA search; click to enlarge reproduction screenshots in full screen
- **➕ Manual Addition**: Enter new POCs via web forms; supports editing and deletion
- **📥 Bulk Import**: Built-in `import_poc.py` script allows bulk import of public POC repositories with intelligent deduplication
## 🚀 Quick Start
### Method 1: Use Right Away (Recommended)
The repository already contains complete data (`poc.db` + reproduction screenshots in `static/pocs/`), so **just clone and use**:
```bash
git clone https://github.com/cryingtor/POC_platform.git
cd POC_platform
pip install flask pyyaml
python app.py
```
Open `http://127.0.0.1:5000` in your browser
### Method 2: Manual Import
In addition to using the existing data, you can also manually add your own POCs:
1. After launching the platform, click **“+ Add POC”** in the top-right corner of the webpage
2. Fill out the form:
- **Vulnerability Name** (required)
- **Vulnerability Type** (e.g., RCE / SQL Injection / XSS)
- **Severity Level** (Critical / High / Medium / Low)
- **Tags** (comma-separated, used for filtering and categorization)
- **FOFA Query** (one-click copy / jump to search)
- **CVE Number / Affected Versions / Source**
- **POC / EXP Code** (supports syntax highlighting)
3. After saving, you can filter and view entries in the list
### Duplicate Detection Mechanism
Automatically removes duplicates during import to avoid redundancy:
- Same CVE ID → Considered a duplicate
- Identical normalized vulnerability name + POC code content that is mutually inclusive → Considered a duplicate
- POCs with the same name but different code → Retained (different exploitation methods)
## 🎯 Interface Features
| Feature | Description |
|---|---|
| **Statistics Card** | Total POCs / Includes FOFA / Includes screenshots; updates based on filter selections |
| **Visual Charts** | Severity pie chart + Top 10 types bar chart (collapsible) |
| **Filters** | Tags / Type / Severity / Date / Search; synchronized with statistics |
| **Sorting** | By time, by severity |
| **View** | Dual table/card view, infinite scrolling |
| **Details** | Code highlighting + copy, FOFA copy + jump, image zoom |
| **Management** | Add / Edit / Delete |
## 📁 Project Structure
```
POC_platform/
├── app.py # Flask backend + REST API
├── import_poc.py # Batch import script (4 POC repositories + deduplicated)
├── poc.db # SQLite database (contains all POC data)
├── static/
│ ├── css/style.css # Styles
│ ├── js/app.js # Frontend logic
│ ├── lib/ # chart.js / highlight.js (available offline)
│ └── pocs/ # POC reproduction screenshots
└── templates/index.html
```
## 📌 Notes
- **Data**: `poc.db` contains over 4,300 POCs, and `static/pocs/` contains over 1,100 reproduction screenshots; both have been committed and are ready to use after cloning
- **Repo Cache**: `repo_cache/` is not committed (2.3GB); it is automatically generated by `import_poc.py` only when incremental updates are needed
- The deduplication key for manually added and imported POCs is `vuln_name + source`