---
description: CVE/exploit research — cari PoC terbaru, validate, document findings
---
// turbo-all

> CONTEXT: Deep research CVE dan exploit terbaru. Cari, validate, compile. Output = actionable intel.

# /cve-intel — D1337 CVE Research

## Prerequisites

- Target tech/version dari Ketua/Abangda
- Atau CVE number spesifik

---

## Step 1: Search Latest CVEs

```bash
# search_web: "$TECH CVE 2024 2025 vulnerability"
# search_web: "$TECH RCE exploit PoC"
# search_web: "site:nvd.nist.gov $TECH"
# search_web: "site:github.com $TECH CVE PoC"
# search_web: "site:exploit-db.com $TECH"
```

## Step 2: Cross-Reference Sources

**Minimal 3 sumber:**
1. NVD (nvd.nist.gov)
2. GitHub PoC repos
3. Exploit-DB / PacketStorm

**Optional:**
- Nuclei templates (github.com/projectdiscovery/nuclei-templates)
- Sploitus.com
- AttackerKB

## Step 3: Validate PoC

Buat setiap CVE yang ditemuin:
- [ ] Cek affected versions
- [ ] Cek apakah target version vulnerable
- [ ] Baca PoC code — pahami logic-nya
- [ ] Identifikasi prerequisites
- [ ] Assess exploitability (Easy/Medium/Hard)

## Step 4: Compile Intel Report

```markdown
# CVE Intel Report: $TECH

## Summary
- Total CVEs found: X
- Critical: X | High: X | Medium: X
- Exploitable with public PoC: X

## CVE Details

### CVE-XXXX-XXXXX
- **Severity**: Critical (CVSS 9.8)
- **Type**: RCE / SQLi / Auth Bypass
- **Affected**: $TECH <= version X.Y.Z
- **PoC**: [GitHub link]
- **Exploitability**: Easy — public PoC available
- **Patched in**: version X.Y.Z+1
- **Attack Vector**: Network / Adjacent / Local

### CVE-XXXX-XXXXX
...

## Recommended Attack Order
1. CVE-X (RCE, Easy) → Try first
2. CVE-Y (Auth Bypass, Medium) → Chain with #1
3. CVE-Z (SQLi, Easy) → Fallback

## Tools Needed
- exploit script from [repo]
- nuclei template: [template-id]
```

---

> **CVE research yang DANGKAL = serangan yang GAGAL. RISET DALAM, SERANG TEPAT.**