# Searchsploit

> Auth/lab ref: Offline CLI search tool for Exploit-DB.

- Skill: `aeondave/searchsploit` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aeondave/searchsploit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aeondave/searchsploit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: MIT
- Author: AeonDave (https://skillmd.com/u/aeondave)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/aeondave/searchsploit

---


# SearchSploit

Offline Exploit-DB search — find public exploits by software name, version, or CVE.

## Quick Start

```bash
# Install
apt install exploitdb

# Search by product
searchsploit apache 2.4

# Search by CVE
searchsploit CVE-2021-41773

# Exact phrase
searchsploit -e "remote code execution"

# Copy exploit to current dir
searchsploit -m 50383
```

## Core Flags

| Flag | Purpose |
|------|---------|
| `-t TERM` | Search title only |
| `-e TERM` | Exact match |
| `-m ID` | Mirror/copy exploit file |
| `-p ID` | Show full path |
| `-x ID` | Examine exploit in pager |
| `--cve CVE` | Search by CVE |
| `-w` | Show web URL (exploitdb.com) |
| `--nmap FILE` | Parse Nmap XML and find exploits |
| `-u` | Update local database |
| `--id` | Show EDB-ID |

## Common Workflows

**Find exploits from Nmap scan:**
```bash
nmap -sV target.com -oX scan.xml
searchsploit --nmap scan.xml
```

**Filter by type:**
```bash
# Local privilege escalation only
searchsploit -t "local" apache 2.4

# Remote exploits only
searchsploit -t "remote" openssh

# Web application exploits
searchsploit -t "webapps" wordpress 5.8
```

**JSON output (for scripting):**
```bash
searchsploit --json apache 2.4 | jq '.RESULTS_EXPLOIT[] | {title: .Title, path: .Path}'
```

**Examine and copy relevant exploit:**
```bash
searchsploit -x 50383     # Read it
searchsploit -m 50383     # Copy to ./
```

**Show web URL for online reference:**
```bash
searchsploit -w openssh 8.2
```

**Update local DB:**
```bash
searchsploit -u
```

## Tips

- Exploit-DB path on Kali: `/usr/share/exploitdb/exploits/`
- Cross-reference with online: `https://www.exploit-db.com/exploits/<EDB-ID>`
- After `-m`, inspect the exploit header for compilation/usage notes before running
- For Windows privesc exploits, prefer Metasploit modules over raw EDB scripts — they handle ASLR/DEP better

## Resources

| File | When to load |
|------|--------------|
| `references/exploit-notes.md` | Exploit compilation, modification, and testing notes |