SecurePoC - A Helping Hand to Identify Malicious CVE Proof of Concept Exploits in GitHub

Learn about SecurePoC, a specialized tool designed to help security analysts identify malicious CVE proof-of-concept exploits hosted on GitHub repositories. Discover how researchers from LIACS, Leiden University, and Modat developed this solution to address the growing problem of malicious PoCs that target security professionals who use them for legitimate research and assessment purposes. Explore the comprehensive analysis of 20,433 unique GitHub-hosted PoC repositories covering CVEs from 2016-2024, revealing that approximately 2.5% of these repositories are likely malicious. Understand the methodology behind SecurePoC's design and evaluation, including how it can effectively triage GitHub-hosted PoCs to distinguish between legitimate security tools and potentially harmful exploits. Gain insights into the broader security implications of publicly shared proof-of-concept code and learn practical approaches for safely utilizing PoCs in security research, red teaming, and vulnerability assessment activities while protecting against malicious actors who exploit the trust within the security community.