name: searchsploit
category: exploit
description: Command-line search tool for Exploit-DB archive.
keywords:
  - exploit
  - database
  - search
  - cve
  - vulnerability
  - poc

parameters:
  search_term:
    type: string
    required: true
    description: Search term(s)

  case_sensitive:
    type: boolean
    flag: "-c"
    description: Case-sensitive search

  exact:
    type: boolean
    flag: "-e"
    description: Exact match

  title:
    type: boolean
    flag: "-t"
    description: Search in title only

  strict:
    type: boolean
    flag: "-s"
    description: Strict search (title + full path)

  path:
    type: boolean
    flag: "-p"
    description: Show full path to exploits

  json:
    type: boolean
    flag: "-j"
    description: JSON output

  overflow:
    type: boolean
    flag: "-o"
    description: Allow overflow in table

  mirror:
    type: string
    flag: "-m"
    description: Copy exploit to current directory

  examine:
    type: string
    flag: "-x"
    description: Open exploit in pager

  www:
    type: boolean
    flag: "-w"
    description: Show URLs to exploit-db.com

  update:
    type: boolean
    flag: "-u"
    description: Update database

  exclude:
    type: string
    flag: "--exclude"
    description: "Terms to exclude (e.g., 'dos|Denial')"

  nmap:
    type: string
    flag: "--nmap"
    description: Parse nmap XML output for exploits

requires_root: false
timeout: 60

command_template: "searchsploit {case_sensitive?} {exact?} {title?} {strict?} {path?} {json?} {overflow?} {www?} {exclude?} {search_term}"

examples:
  - "searchsploit apache 2.4"
  - "searchsploit -t wordpress plugin"
  - "searchsploit -e 'Microsoft IIS 6.0'"
  - "searchsploit -m 42966"
  - "searchsploit -x exploits/php/webapps/42966.py"
  - "searchsploit --nmap scan.xml"

notes: |
  Database location:
  /usr/share/exploitdb/

  Search tips:
  - Use quotes for exact phrases
  - Combine multiple terms
  - Use -t for title-only search
  - Use --exclude to filter results

  After finding exploit:
  - -m to copy to current dir
  - -x to examine code
  - -p to get full path

  Update regularly:
  searchsploit -u

  Exploit types:
  - dos: Denial of Service
  - local: Local privilege escalation
  - remote: Remote code execution
  - webapps: Web application exploits
  - shellcode: Shellcode samples