searchsploit

BashDraft — pending expert review3 practice missions

Search the local Exploit-DB archive

Searches a local, offline copy of Exploit-DB for known exploits matching your search terms — usually a product name and version. Purely a research/lookup tool: searching does not run or download anything by itself.

Practice searchsploit

Usage

searchsploit [options] search-term...

Scope: Searching the local Exploit-DB copy is offline and harmless. Running what you find is not: use an exploit only against systems you own or are explicitly authorised to test, and read its source first — public exploit code can be broken, or do more than its title says.

Options and flags

search-term
product/software name and version to search for
-w, --www
show the exploit-db.com URL for each result, not just the local path
-x, --examine ID
display the source of one specific exploit by its EDB-ID
-m, --mirror ID
copy one exploit's source into your current directory
-j, --json
output results as JSON

Examples

searchsploit apache 2.4.49
Any known exploits for Apache 2.4.49.
searchsploit -w openssh 7.2
Same search, but also print the exploit-db.com link for each hit.
searchsploit -m 50383
Copy exploit #50383's source code into the current folder to read it.

Common mistakes

searchsploit --Mirror 50383 searchsploit -m 50383

Option names are case-sensitive; the long form is lowercase --mirror (or short -m), not --Mirror.

Related commands

nmap