Search Exploit-DB for matching exploits and shellcodes

searchsploit is the command-line interface to Exploit-DB, the public archive of exploits and shellcodes. You give it a search term, a CVE, or an Nmap scan, and it returns the matching entries from a local copy of the database. Because the data sits on disk, searches run offline and stay fast regardless of network conditions.

It matches flexibly by default and tightens on request. Title-only and exact-match options narrow broad terms, strict mode disables fuzzy version matching, and an exclude filter drops noise by chaining terms with a pipe. CVE search maps a vulnerability id straight to known exploits, and feeding an Nmap XML file checks every detected service version against the archive at once.

On Trickest, searchsploit is a Vulnerabilities node that takes a search term and writes a file and a folder. JSON output makes each result a structured record, so you can wire it after service detection to turn discovered software versions into a list of candidate exploits.