How do I install the Searchsploit skill?

Run npx skillmds@latest add aeondave/searchsploit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Searchsploit skill do?

Auth/lab ref: Offline CLI search tool for Exploit-DB. It is listed under Security on SkillMD.

Is Searchsploit safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Searchsploit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Searchsploit free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Searchsploit?

AeonDave (@aeondave) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Searchsploit by aeondave — Agent Skill

Name: Searchsploit
Author: AeonDave

File contents

SearchSploit

Offline Exploit-DB search — find public exploits by software name, version, or CVE.

Quick Start

# Install
apt install exploitdb

# Search by product
searchsploit apache 2.4

# Search by CVE
searchsploit CVE-2021-41773

# Exact phrase
searchsploit -e "remote code execution"

# Copy exploit to current dir
searchsploit -m 50383

Core Flags

Flag	Purpose
`-t TERM`	Search title only
`-e TERM`	Exact match
`-m ID`	Mirror/copy exploit file
`-p ID`	Show full path
`-x ID`	Examine exploit in pager
`--cve CVE`	Search by CVE
`-w`	Show web URL (exploitdb.com)
`--nmap FILE`	Parse Nmap XML and find exploits
`-u`	Update local database
`--id`	Show EDB-ID

Common Workflows

Find exploits from Nmap scan:

nmap -sV target.com -oX scan.xml
searchsploit --nmap scan.xml

Filter by type:

# Local privilege escalation only
searchsploit -t "local" apache 2.4

# Remote exploits only
searchsploit -t "remote" openssh

# Web application exploits
searchsploit -t "webapps" wordpress 5.8

JSON output (for scripting):

searchsploit --json apache 2.4 | jq '.RESULTS_EXPLOIT[] | {title: .Title, path: .Path}'

Examine and copy relevant exploit:

searchsploit -x 50383     # Read it
searchsploit -m 50383     # Copy to ./

Show web URL for online reference:

searchsploit -w openssh 8.2

Update local DB:

searchsploit -u

Tips

Exploit-DB path on Kali: /usr/share/exploitdb/exploits/
Cross-reference with online: https://www.exploit-db.com/exploits/<EDB-ID>
After -m, inspect the exploit header for compilation/usage notes before running
For Windows privesc exploits, prefer Metasploit modules over raw EDB scripts — they handle ASLR/DEP better

Resources

File	When to load
`references/exploit-notes.md`	Exploit compilation, modification, and testing notes

---name: searchsploitdescription: Auth/lab ref: Offline CLI search tool for Exploit-DB.license: MIT---# SearchSploitOffline Exploit-DB search — find public exploits by software name, version, or CVE.## Quick Start```bash# Installapt install exploitdb# Search by productsearchsploit apache 2.4# Search by CVEsearchsploit CVE-2021-41773# Exact phrasesearchsploit -e "remote code execution"# Copy exploit to current dirsearchsploit -m 50383```## Core Flags| Flag | Purpose ||------|---------|| `-t TERM` | Search title only || `-e TERM` | Exact match || `-m ID` | Mirror/copy exploit file || `-p ID` | Show full path || `-x ID` | Examine exploit in pager || `--cve CVE` | Search by CVE || `-w` | Show web URL (exploitdb.com) || `--nmap FILE` | Parse Nmap XML and find exploits || `-u` | Update local database || `--id` | Show EDB-ID |## Common Workflows**Find exploits from Nmap scan:**```bashnmap -sV target.com -oX scan.xmlsearchsploit --nmap scan.xml```**Filter by type:**```bash# Local privilege escalation onlysearchsploit -t "local" apache 2.4# Remote exploits onlysearchsploit -t "remote" openssh# Web application exploitssearchsploit -t "webapps" wordpress 5.8```**JSON output (for scripting):**```bashsearchsploit --json apache 2.4 | jq '.RESULTS_EXPLOIT[] | {title: .Title, path: .Path}'```**Examine and copy relevant exploit:**```bashsearchsploit -x 50383 # Read itsearchsploit -m 50383 # Copy to ./```**Show web URL for online reference:**```bashsearchsploit -w openssh 8.2```**Update local DB:**```bashsearchsploit -u```## Tips- Exploit-DB path on Kali: `/usr/share/exploitdb/exploits/`- Cross-reference with online: `https://www.exploit-db.com/exploits/<EDB-ID>`- After `-m`, inspect the exploit header for compilation/usage notes before running- For Windows privesc exploits, prefer Metasploit modules over raw EDB scripts — they handle ASLR/DEP better## Resources| File | When to load ||------|--------------|| `references/exploit-notes.md` | Exploit compilation, modification, and testing notes |

Frequently asked questions

Searchsploit