# Cve Poc Generator

> CVE PoC 生成与验证：从公开情报构建最小可复现验证器，输出标准化 PoC 文件。触发词：PoC、EXP编写、漏洞复现脚本。无现成 PoC 的 N-day 由本 skill 补位。

- Skill: `wufufu770/cve-poc-generator` (Agent Skill)
- Install (CLI): `npx skillmds@latest add wufufu770/cve-poc-generator`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wufufu770/cve-poc-generator/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: wufufu770 (https://skillmd.com/u/wufufu770)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wufufu770/cve-poc-generator

---


## TL;DR

- **目的**：CVE PoC 生成与验证：从公开情报构建最小可复现验证器，输出标准化 PoC 文件。
- **适用**：已知 CVE 的复现（用于报告）
- **输入**：CVE 编号 + 目标组件版本
- **输出**：可复现 PoC + 利用步骤 + 风险评估
- **红线**：仅用于授权测试；不传播 0-day
- **关联**：上游：component-nday → 下游：fp-check, reporting


## When to Use

- Target presents indicators of the vulnerability class this skill covers
- Fingerprint or recon indicates the relevant technology stack is in use
- Authorized testing scope covers the target endpoint or component
- Findings need to be validated through this skill's methodology

## When NOT to Use

- Target is clearly outside this skill's scope (refer to related skills)
- No authorization for testing
- Need a different category of testing (use related skills)
## Workflow

1. **Identify CVE** — From component fingerprint
2. **Search sources** — ExploitDB, GitHub, Packet Storm, Metasploit
3. **Select PoC** — Read-only preferred, full-RCE only with approval
4. **Adapt** — Match target version, environment
5. **Test in isolation** — Never on production
6. **Verify** — Cross-validate with fp-check
7. **Document** — Screenshot, request/response, time


## Advanced Techniques

### ExploitDB Search Strategy
Search ExploitDB by EDB-ID, CVE, or keywords. Verify PoC is for exact component version (not just family).

### PoC Adaptation
When no direct PoC exists, use Metasploit module (search type:exploit name:cve) + manual crafting based on CVE description.

### Safe Exploitation
Always run PoC in isolated VM first. Use `strace`/`ltrace` to understand what PoC does before running on production target.

### Multi-Stage Exploits
Some CVEs require chain: e.g., SSRF → IMDSv1 → IAM creds. Use one skill's output as another's input.