attack-cve-hunting

CVE hunting — quick fingerprint and version-based known CVE exploitation

SKILL.md

GitHub

CVE Hunting

Objective

Fingerprint versions and exploit known CVEs.

Attribution: Methodology from KathanP19/HowToHunt — CVES. Licensed GPL-3.0.

Testing Methodology

# Version fingerprint
curl -s https://target.com | grep -i "version\|generator"
curl -s https://target.com/readme.html | head
whatweb https://target.com

# Check for known CVE via version
# Example: WordPress 5.0 -> search exploit-db
searchsploit wordpress 5.0

# Quick CVE checks
nuclei -u https://target.com -t cves/

References