Skip to content

Latest commit

 

History

History
104 lines (71 loc) · 1.73 KB

exploit-research.md

File metadata and controls

104 lines (71 loc) · 1.73 KB

Exploit Research

Top Resources

Search services vulnerabilities

searchsploit --exclude=dos -t apache 2.2.3
msfconsole; > search apache 2.2.3

CVE Database

https://cve.mitre.org/cve/search_cve_list.html

National Vulnerability Database (NVD)

  • U.S. Government Repository of standards based vulnerability management data represented using the Security Content Automation Protocol.
https://mvd.mist.gov/
https://nvd.nist.gov/general/visualizations
  • To show a visualization of CVSS’s Severity over time.
https://nvd.nist.gov/vuln/data-feeds

CVE Details

https://www.cvedetails.com

Exploit Database

  • Search by CVE and OSVDB identifier.
https://www.exploit-db.com

Searchsploit by Exploit-db

  • Offline source for finding vulnerabilities and exploits.
  • To update the database:
searchsploit -u
searchsploit 
searchsploit [key word or service/service version]
  • Copy a searchsploit result to your present working directory
searchsploit -m 39446 win_x86-64/local/39525.py
  • Alternative copy method
locate 35513.py 
cp /usr/share/exploitdb/platforms/linux/remote/35513.py /root/Desktop/35513.py
  • Exclude certain results like DOS or POC
searchsploit linux kernel 3.2 --exclude="(PoC)|/dos/"
  • Can print the file for an exploit
cat /usr/share/exploitdb/exploits/linux/remote/16922.rb
  • Exact match to your keyword input
searchsploit -e
  • Always start with specific and move to more general

Working with exploits

  • Shebang
Python #!/usr/bin/python
Bash #!/bin/bash
Bourne shell #!/bin/sh
Perl #!/usr/bin/perl