0xMarcio 749424a8a1 Find day-one PoCs and check they carry code before linking them ...

The just landed lane still ran the language filter, and a repository published
this morning does not have one: GitHub has not classified it yet. Measured on
a three day window, filtering on language dropped 17 of 47 CVE-2026 repositories,
and the ones it dropped were the newest. Both filters are gone from this lane.

Dropping them lets through what they were incidentally keeping out, so the
check is now direct: every candidate has its root tree read, and a repository
holding nothing but a README and a licence is rejected as a write-up rather
than an exploit. Three were turned away on this run, and the lane went from
ten rows to seventeen candidates carrying real code.

Rows also stop shipping blank. A repository a day old often has no description,
so the CVE's own summary stands in, taken from the index or, for a CVE too new
to have been synced yet, from NVD directly. Every row on this run has one,
where four were empty before.

2026-09-01 05:41:05 +02:00

..

workflows

Index ExploitDB and Metasploit, score everything with EPSS, and stop hiding new PoCs

2026-09-01 05:24:39 +02:00

cve_sync_state.json

Update CVE PoCs 2026-08-31

2026-08-31 08:41:18 +00:00

getTrending.py

Find day-one PoCs and check they carry code before linking them

2026-09-01 05:41:05 +02:00

hero.py

Bring the site up to the README and fix the unreadable text

2026-09-01 04:46:30 +02:00

link_audit_state.json

Drop PoC links to deleted repositories 2026-08-31

2026-08-31 11:04:40 +00:00