nomi-sec/PoC-in-GitHub resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

8012 stars · 1353 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

An automatically curated dataset and web service that collects proof-of-concept (PoC) exploit repositories from GitHub as CVEs are published, indexed by CVE ID. It provides a browsable site, RSS feeds, and a public JSON API for querying PoCs by CVE, with NVD descriptions included.

Use cases

• find proof-of-concept exploits for a specific CVE
• monitor newly published exploit code on GitHub
• query PoC repos by CVE ID via API for threat intel tooling
• check whether a vulnerability in my stack has public exploit code
• subscribe to an RSS feed of new CVE PoCs
• build security research dashboards from the PoC dataset

When to choose

• you need to quickly discover whether public exploit code exists for a CVE
• you're building threat intelligence or vulnerability triage tooling and want a machine-readable PoC feed
• you want a continuously updated index without manually searching GitHub

When to avoid

• you need verified or safe exploits - the repo explicitly warns collected code may be malware
• you need a curated, quality-controlled exploit database rather than an automated aggregation
• you need remediation guidance rather than exploit references

Facets

dataset · maturity active

security vulnerability-scanning osint search-engine security penetration-testing developer-tools self-hosted cli cve poc exploit-database threat-intelligence rss-feed auto-collected security-research web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nomi-sec/PoC-in-GitHub")