searchsploit
Offline search of the Exploit-DB archive.
KaliParrotpassive
pkg: exploitdb
searchsploit queries a local copy of Exploit-DB to find public exploits and PoCs for software and versions.
Syntax
searchsploit {term}
Example
searchsploit apache 2.4
Lists known exploits/PoCs matching Apache 2.4 from the local Exploit-DB.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
searchsploit
Usage examples
searchsploit apache 2.4
Find exploits for Apache 2.4.
searchsploit -m 12345
Copy exploit 12345 to the current dir.
Advantages
- Works fully offline
- Instant mapping of version → exploit
- Copies exploit code locally (-m)
Disadvantages
- Only as current as the local DB (run searchsploit -u)
- Term matching can be noisy
- No exploitation itself
Tags
#exploit-db#cve
Official docs: Exploit-DB ↗
Related commands
Frequently asked questions
What is searchsploit used for?
searchsploit queries a local copy of Exploit-DB to find public exploits and PoCs for software and versions.
What is an example searchsploit command?
A common example is: searchsploit apache 2.4 — Lists known exploits/PoCs matching Apache 2.4 from the local Exploit-DB.
Is searchsploit part of Kali Linux?
Yes. searchsploit ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install exploitdb.
What category of security tool is searchsploit?
searchsploit is a Vulnerability Analysis tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.