A high-performance, colorized Command-Line Interface (CLI) tool designed for security researchers, penetration testers, and blue teamers to aggregate real-time vulnerability intelligence and Proof-of-Concept (PoC) exploits instantly.
Developed by Security Bong A.K.A Rahul.
- ⚡ Dual-Engine Upstream Querying: Concurrently queries both the National Vulnerability Database (NVD) and the upstream MITRE Registry API, pulling accurate records weeks before NVD finishes processing them.
- 🚨 CISA KEV Real-Time Alerts: Auto-cross-references inputs against the US Government's Known Exploited Vulnerabilities (KEV) catalog to flag active zero-days and ransomware campaign usage.
- 🌌 Massive Exploit Surface Scan: Live filters the GitHub API to surface active public exploit scripts and ranks them by popularity (stars).
- 📚 Ranked Reference Engine: Intelligent scoring system that filters out mailing list clutter and delivers the Top 3 high-value vendor advisories and security deep-dives.
- 📝 Integrated Medium Write-ups & OSINT: Prioritizes structural
medium.comresearch articles and generates dynamic, precise Google/Medium OSINT Dorks when native mappings don't exist. - 🛡️ Copy-Paste Resilient Filter: Automatically sanitizes input to catch hidden Unicode formatting typos (like typographical En/Em dashes
–/—) frequently copied from security blogs. - 🎨 High-Contrast ANSI Colorization: Native structural terminal coloring that auto-initializes on Windows CMD, macOS, and Linux out of the box.
This engine runs entirely on standard HTTP modules. The only external requirement is the requests: pip install requests
Simply execute the script without arguments to drop into a continuous intelligence shell: python cve_hunter.py or Pass a single target directly into the runtime arguments to generate a quick, high-signal summary report: python cve_hunter.py CVE-xxxx-xxxx
========================================================================
[+] Core Engine Developed By: Security Bong A.K.A Rahul
========================================================================
================================================================================
TARGET INTEL REPORT: CVE-2023-23397
================================================================================
[🚨 CRITICAL THREAT] THIS VULNERABILITY IS ACTIVELY EXPLOITED IN THE WILD!
└─ Action Required: Microsoft Outlook Privilege Escalation Vulnerability...
[*] Querying National Vulnerability Database (NVD)...
[*] Querying MITRE Upstream Registry...
[+] SIMPLIFIED DESCRIPTION
------------------------------
Microsoft Outlook Privilege Escalation Vulnerability via specially crafted emails...
[+] AFFECTED VS PATCHED VERSIONS
------------------------------
• MICROSOFT OUTLOOK 2016
└─ Vulnerable: Any baseline -> up to version 16.0.5390.1000
└─ FIXED / PATCHED IN: Version 16.0.5390.1000 or higher
[+] EXPLOIT CODE & PROOF-OF-CONCEPT (PoC) LINKS
--------------------------------------------------
[✓] Found active public code repositories on GitHub:
→ Link: https://github.com/example/cve-2023-23397-poc
Info: Weaponized exploit script for Microsoft Outlook NTLM Relay. (Stars: 342)
[+] COMMUNITY BLOGS & WRITE-UPS (Medium)
--------------------------------------------------
[✓] Found verified Medium research write-ups in the registries:
→ https://medium.com/@security-researcher/deep-dive-outlook-zero-day-2023
================================================================================
This tool is created for educational, defensive, and authorized security auditing purposes only. Utilizing public exploit strings to target infrastructure without explicitly documented owner consent is illegal. The developer (Security Bong A.K.A Rahul) assumes no liability for misuse or damage caused by this utility.