Collect CVE details from cvelist (Shout out to CVE Project!) Split CVEs up by year. Find PoCs for each CVE using 2 techniques: References Gather each CVE's References. Check if any of them points to a PoC using ffuf and a list of keywords Regex: (?i)[^a-z0-9]+(poc|proof of concept|proof[-_]of[-_]concept)[^a-z0-9]+ (Thanks @joohoi!) Note: ffuf is awesome for more purposes than just content discover

