Exploitation
SearchSploit is a command-line search tool for Exploit-DB that allows you to possess a local copy of the Exploit Database. It provides the ability to perform detailed offline searches for exploits within the saved repository.
sudo apt install exploitdb
searchsploit [options] <search_term>
SearchSploit is a command-line search tool for Exploit-DB that provides a local copy of the Exploit Database. It allows offline searching for exploits, shellcodes, and security papers.
The tool supports various search options including title search, path search, and Nmap XML integration. It can mirror exploit code to the current directory for review.
SearchSploit is essential for penetration testers to quickly find relevant exploits for discovered vulnerabilities. It provides a fast, offline way to access the Exploit-DB repository.
searchsploit apacheSearch Exploit-DB for exploits matching the term 'apache'searchsploit apache 2.4Search using multiple terms; only results matching all terms are shownsearchsploit -t oracleSearch only the exploit title, ignoring the file pathsearchsploit -e 'Microsoft Windows'Perform an exact match on the full search phrasesearchsploit -s 'WordPress 4.1.0'Strict version matching (avoids reporting non-matching versions)searchsploit --exclude='/dos/'Exclude results containing a given string, e.g. denial-of-service exploitssearchsploit -c opensshPerform a case-sensitive searchsearchsploit -w smbShow the full Exploit-DB.com URL for each resultsearchsploit -p 39446Show the full path to an exploit by its EDB-ID and copy it to the clipboardsearchsploit -x 39446Open/examine an exploit by EDB-ID using the pagersearchsploit -m 39446Mirror (copy) the exploit file into the current working directorysearchsploit --nmap /path/to/scan.xmlSearch for exploits based on services found in an Nmap XML output filesearchsploit -j apacheOutput search results in JSON formatsearchsploit -o smbOutput results in overflow (wide) column layoutsearchsploit --id apacheDisplay the EDB-ID number in the results columnFind exploits for discovered vulnerabilities.
Search exploits from Nmap XML results.
Study exploit code and techniques.
Match software versions to known exploits.
The search returns a structured table detailing the exploit's title, the platform it targets, and the local file path referenced by its unique Exploit-DB identifier.
This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.