GitXplorerGitXplorer
t

find-gh-poc

public
136 stars
20 forks
1 issues

Commits

List of commits on branch main.
Verified
2a7527de8aedfc7e03915d0f28a252d21fdc292e

Add docker image location

committed 2 years ago
Verified
33f5278e8be7cb0b775550ded23d0b7002a324cf

Merge pull request #26 from trickest/delay-flag

committed 2 years ago
Unverified
2b27a2e19a25a7fac6f326624f1cb8fcca5d878a

Update command line options

committed 2 years ago
Unverified
5c51965986ebc5f1b2d88e747ed6742f17165132

Merge branch 'main' into delay-flag

committed 2 years ago
Unverified
aed94582ef763a481ce1102e03ce0023e7cd4014

Increase delay time by API response time

PPolovinaD committed 2 years ago
Unverified
716329d3ec57d8cf8e250a2e7431e2fac7f0efee

Remove redundant delay multiplication

PPolovinaD committed 2 years ago

README

The README file for this repository.

Find-gh-poc Tweet

The centerpiece of the Trickest CVE project; finds CVE PoCs on Github.


Installation

From binary

Download a prebuilt binary from the releases page and unzip it.

From source

Go version 1.17 is recommended.

go install -v github.com/trickest/find-gh-poc@latest

Docker

docker pull quay.io/trickest/find-gh-poc

Command line options

  -query-string string
    	GraphQL search query
  -query-file string
    	File to read GraphQL search query from
  -adjust-delay
    	Automatically adjust time delay between requests
  -delay int
    	Time delay after every GraphQL request [ms]
  -silent
    	Don't print JSON output to stdout
  -token-string string
    	Github token
  -token-file string
    	File to read Github token from
  -o string
    	Output file name

Query examples

  • cve-2022
  • cve-2022-1234
  • jenkins

Note on Results

Depending on the search query, the results will most likely contain a few false positives (either PoCs of other CVEs or irrelevant repositories). Find-gh-poc outputs all of the query results without (currently) trying to filter them. We recommend that you use the results as a starting point and do your own filtering as you see fit for your use case.

References

https://github.com/trickest/cve