Beyond the Surface: Investigating Malicious CVE Proof of Concept Exploits on GitHub. (arXiv:2210.08374v2 [cs.CR] UPDATED)

Exploit proof-of-concepts (PoCs) for known vulnerabilities are widely shared
in the security community. They help security analysts to learn from each other
and they facilitate security assessments and red teaming tasks. In the recent
years, PoCs have been widely distributed, e.g., via dedicated websites and
platforms, and public code repositories such as GitHub. However, there is no
guarantee that PoCs in public code repositories come from trustworthy sources
or even that they do what they are supposed to do.

In …

analysts assessments beyond community concept concepts cve distributed exploit exploits github known vulnerabilities learn malicious pocs red teaming security security assessments vulnerabilities websites