aboutcode-org / aboutcode-org/vulnerablecode

Improve PoC collection using GitHub archive data

Offen
#2,429 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
702
Forks
328
Ø Merge
3 T. 8 Std.
Gemergte PRs (30 T.)
3

Beschreibung

We are currently collecting PoCs primarily from this repository:

* https://github.com/nomi-sec/PoC-in-GitHub

From my understanding, this repository is generated by an automated bot.

There is another project doing something very similar:

* https://github.com/ycdxsb/PocOrExp_in_Github

The general approach seems to be running a CI job that uses the GitHub API to search for repositories containing CVE IDs and then collecting the results.

However, I think we could use a cleaner and potentially more reliable approach for collecting PoCs.

Instead of repeatedly querying the GitHub API for every CVE ID, we could use the GitHub hourly archive data:

* https://github.com/giant-hourly-archive/giant-hourly-archive-2011
* ...
* https://github.com/giant-hourly-archive/giant-hourly-archive-2026

The idea would be to process the archive data locally and search for CVE IDs across newly indexed GitHub content. This could significantly reduce the number of GitHub API requests and give us a more reproducible dataset.

We could then add an extra validation layer to determine whether a discovered repository is actually a valid PoC/Exploit repository. For example, this could involve:

* Manual review by contributors for higher-confidence results.
* An LLM-based validation step that reads the repository metadata/content and determines whether it actually contains a PoC or exploit related to the identified CVE.
* Potentially combining both approaches to assign a confidence level to each result.

As a proof of concept, I’ve tested this approach with:
* https://github.com/ziadhany/ExploitArchive

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.