security enabled verified low v1.0.0

searchsploit

Command-line search tool for the Exploit-DB archive, enabling offline searching of exploits and shellcode.

📋 Live Preview 
searchsploit {search-term}
🌍 search-term → eternalblue 
searchsploit {search-term}

Sandbox: execFile · Timeout: 60s

Capabilities

exploit.search
vulnerability.lookup
exploitdb.query

Parameters

Name Type Required Default Description Aliases
search-term string Yes - Search term, CVE ID, or exploit title
flag-c boolean No - Case-sensitive search -c, --case
flag-e boolean No - Exact match search -e, --exact
flag-w boolean No - Show URLs to Exploit-DB -w, --www
flag-t string No - Filter by type (dos, local, remote, webapps, shellcode, poc) -t, --type
flag-p boolean No - Show full path to exploit file -p, --path
flag-j boolean No - Output results in JSON -j, --json
flag-id string No - Show details for specific EDB-ID --id
flag-title boolean No - Display titles only --title
flag-url boolean No - Show Exploit-DB URLs (same as -w) --url
flag-nmap string No - Search using Nmap service version output --nmap
flag-update boolean No - Update exploit database --update
flag-v boolean No - Verbose output -v, --verbose
h boolean No - Show this help message -h, --help
o boolean No - Display exploit title with overflow indicator -o, --overflow
s boolean No - Show screenshot path -s, --screenshot
url boolean No - ) --url, -DB, -w

Contract

Inputs

query.string

Search term or CVE ID to look up

Outputs

exploit.paths

Local file paths to matching exploits

Side effects:

Workflow Edges

Produces

exploit.paths

Consumes

query.string

Resource Profile

ResourceValue
CPUlow
Memory32 MB
Networklow
Disk I/Olow

Examples

Search for EternalBlue exploits

searchsploit eternalblue

Search by CVE ID

searchsploit CVE-2021-41773

Exact match search

searchsploit -e Apache 2.4.49

Show full local paths

searchsploit -p 48191

Filter by type (webapps)

searchsploit -t webapps Wordpress

Show Exploit-DB URLs and JSON output

searchsploit -w -j eternalblue

Search by Nmap service version

searchsploit --nmap file.xml

Update local exploit database

searchsploit --update

Documentation

SearchSploit — Exploit-DB Command-Line Search Tool

SearchSploit is an offline command-line search tool for the Exploit-DB archive. It allows penetration testers to search through the complete collection of exploits, shellcode, and papers without requiring internet access.

Usage

searchsploit [options] <search-term>

Common Searches

  • Software name: searchsploit apache 2.4.49
  • CVE ID: searchsploit CVE-2024-12345
  • Platform type: searchsploit -t webapps wordpress
  • Vulnerability type: searchsploit -t dos smb

Output Fields

Field Description
EDB-ID Unique Exploit-DB identifier
Title Exploit title and description
Type Category (webapps, remote, local, dos)
Platform Target platform (windows, linux, etc.)
Path Full local file path to the exploit
URL Exploit-DB web URL

Related Tools

metasploitexploit-db

References