Getsploit
Command line utility for searching and downloading exploits from popular collections like Exploit-DB, Metasploit, and Packetstorm. Allows immediate download of exploit source code to the working directory.
Description
Getsploit is a command line tool inspired by searchsploit that combines exploit searching and downloading capabilities. It enables users to query exploits across major online collections including Exploit-DB, Metasploit, and Packetstorm, streamlining the process of finding relevant exploit code during security assessments.
The tool's key strength is its ability to download exploit source code directly to the current working path, facilitating quick access for testing and analysis. This makes it particularly useful for penetration testers and security researchers who need to rapidly locate and retrieve exploits without manual browsing.
Getsploit supports local database searches and updates, along with options for JSON output and API key configuration for enhanced functionality.
How It Works
Getsploit searches online exploit databases such as Exploit-DB, Metasploit, and Packetstorm via HTTP requests using python3-httpx. Results are processed with python3-orjson and displayed in tabular format via python3-texttable. The --mirror option downloads exploit source code copies to the current working directory. Local searches use the getsploit.db database, which can be updated with --update. Vulners API integration is supported via --api-key for additional exploit data.
Installation
sudo apt install getsploitFlags
Examples
getsploit --helpgetsploit QUERYgetsploit --mirror QUERYgetsploit --json QUERYgetsploit --local QUERYgetsploit --updategetsploit --set-keygetsploit -k APIKEY QUERY