CHAPTER 04 · RESEARCH

Searchsploit

Searchsploit searches Exploit-DB entries locally. It supports vulnerability research; it does not prove that a target is vulnerable.

Where it fits

A sound workflow is identify exact service and version → research vendor advisories and public references → assess applicability → validate only within agreed scope.

Search carefully

Use a specific product and version where possible. Broad searches create noisy results and may include unrelated software.

searchsploit "Apache httpd 2.4"; searchsploit --cve CVE-2021-41773; searchsploit -w "OpenSSH"

The -w option includes Exploit-DB URLs in results, useful when recording references in an assessment report.

Review before acting

• Check affected versions and prerequisites.
• Read the advisory and vendor guidance.
• Consider patches, backports, and mitigations.
• Review proof-of-concept code only in a safe lab.

Practice safely

Use Searchsploit for learning, inventory research, and reporting in a lab or authorised engagement. Focus reports on evidence and remediation, not merely a version match.