Finding Exploits
Search Exploit-DB
Kali
>
searchsploit windows 2003 | grep -i local
Search Google
Google> site:exploit-db.com exploit kernel <= 3
Search Metasploit
Kali
>
grep -R "W7" /usr/share/metasploit-framework/modules/exploit/windows/*
Search Vulners
USING EXPLOIT DATABASE
- http://0day.today/
- https://www.exploit-db.com/
- https://www.vulnerability-lab.com/
- https://cxsecurity.com/dorks/
- http://sec.jetlib.com/Exploit-DB/
- http://eastexploits.com/
- https://vulners.com/landing
- http://leetupload.com/dbindex2/
Exploit Research
Find exploits for enumerated hosts / services.
| COMMAND | DESCRIPTION | |
|---|---|---|
| `searchsploit windows 2003 | grep -i local` | Search exploit-db for exploit, in this example windows 2003 + local esc |
site:exploit-db.com exploit kernel <= 3 |
Use google to search exploit-db.com for exploits | |
grep -R "W7" /usr/share/metasploit-framework /modules/exploit/windows/* |
Search metasploit modules using grep - msf search sucks a bit |
Searching for Exploits
Install local copy of exploit-db:
searchsploit –u
searchsploit apache 2.2
searchsploit "Linux Kernel"
searchsploit linux 2.6 | grep -i ubuntu | grep local