Weaponizing Python for Good: Building a Next-Gen CVE Scanner That Detects Zero-Day Vulnerability
Talkat PythonAsia 2026 · on Sunday, 2026-03-22· at 11:15· Yuchengco Hall 5th Flr. Y507 (Workshop Room 1)·
summary
A Python-based scanner is built to find and analyze real SharePoint RCEs, claims to detect CVE-2025-5370 SharePoint RCE across internet-exposed hosts discovered via Shodan discovery, and uses a local model for analysis named Olama local LLM. It runs safe exploit simulation without actually exploiting targets, scores findings 0–100 to reduce false positives, emits HTML/JSON/CSV reports, handles thousands of targets (demo scanned ~8,000 exposed SharePoint instances) and shows the tool runs end-to-end.
AI-written summary · about
chapters (5)
- 0:00Introduction to Python in cybersecurity
- 3:38Building the vulnerability scanner
- 10:49Demonstrating Shodan for reconnaissance
- 11:52Live demo of the Python scanner
- 15:59Q&A and future applications
related talks
46mHunting for Vulnerabilities in Microsoft SharePoint: Case Study
24mUsing Python to Detect Vulnerabilities in Binaries
18mSecurePoC: A Helping Hand to Identify Malicious CVE Proof of Concept Exploits in GitHub
22mMalware Hunting - Using python as an attack weapon
27mExploited CVEs of 2024: Lessons for Vendors and Defenders
26mWhen Models Write Malware: Defending Against On-demand Exploits
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
47mToolShell, Patch Bypass, and the AI That Might Have Seen It Coming