Beyond the Surface: Investigating Malicious CVE Proof of Concept Exploits on GitHub

Understand

Exploit proof-of-concepts (PoCs) for known vulnerabilities are widely shared in the security community.

• They help security analysts to learn from each other and they facilitate security assessments and red teaming tasks.
• In the recent years, PoCs have been widely distributed, e.g., via dedicated websites and platforms, and public code repositories such as GitHub.
• However, there is no guarantee that PoCs in public code repositories come from trustworthy sources or even that they do what they are supposed to do.