# Searching Exploit DB

> Use when looking up CVE identifiers, EDB-IDs, public exploit references, or product/version matches in Exploit-DB for vulnerability research or authorized security assessment.

- Skill: `ptn1411/searching-exploit-db` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add ptn1411/searching-exploit-db`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ptn1411/searching-exploit-db/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: ptn1411 (https://skillmd.com/u/ptn1411)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/ptn1411/searching-exploit-db

---


# Searching Exploit-DB

## Purpose

Find public Exploit-DB entries reproducibly, then assess whether each entry is relevant to the user's product and environment. An Exploit-DB match proves that a public PoC exists; it does not prove that a target is vulnerable or that the PoC is safe to run.

## Workflow

Use the bundled read-only helper on Windows or when `searchsploit` is unavailable:

```powershell
python searching-exploit-db\scripts\search_exploit_db.py --cve CVE-2021-44228
python searching-exploit-db\scripts\search_exploit_db.py --edb-id 50592 --format json
python searching-exploit-db\scripts\search_exploit_db.py --query "Apache Log4j remote"
```

The helper reads the official `files_exploits.csv` from the Exploit-DB GitLab repository. Pass `--csv <path>` to use a local clone or saved CSV. On systems with SearchSploit, `searchsploit --cve 2021-44228 -j` is also appropriate.

For screenshots, tags, setup files, and vulnerability mappings absent from the CSV, inspect the corresponding `https://www.exploit-db.com/exploits/<EDB-ID>` page.

## Assess Applicability

For every candidate:

1. Confirm the CVE and affected versions with the current vendor advisory, CVE record, or NVD; recommend the vendor's current supported remediation, not merely the first historical fixed release.
2. Compare product, exact version, architecture, attack type, prerequisites, authentication, and network position. Distinguish the vulnerable target OS, the PoC's supported target platform, and the host used to run the PoC.
3. Report Exploit-DB's `verified` value without treating it as a guarantee.
4. State missing facts and distinguish `direct match`, `possibly relevant`, and `not applicable`.

Do not download, compile, or execute a PoC as part of lookup. If the user asks to test one, confirm the target is owned or explicitly authorized and use the appropriate assessment skill.

## Outputs

Return:

| Field | Content |
|---|---|
| Query | Normalized CVE, EDB-ID, or terms |
| Matches | EDB-ID, title, platform/type, date, verified status, URL |
| Applicability | Direct, possible, or not applicable with reasons |
| Validation | Linked Exploit-DB page plus vendor/CVE advisory and affected-version evidence |
| Caveats | Preconditions, missing evidence, and safe next step |

Include the CSV source and retrieval time so a changing `main` branch result can be traced.

If there is no match, say that Exploit-DB has no indexed result; do not claim that no public exploit exists elsewhere.

## Anti-Patterns

- Matching a CVE by substring instead of the exact `codes` token.
- Treating an EDB entry as authoritative affected-version data.
- Selecting a PoC by title while ignoring platform or prerequisites.
- Equating `Not verified` with false, or `Verified` with universally reliable.