> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation/searchsploit.md).

# Searchsploit

Searchsploit 使用笔记，用于在本地查询 Exploit-DB、查找公开利用代码和审查概念验证代码。

{% hint style="info" %}
**Searchsploit** 是一个用于快速搜索已知漏洞利用和与漏洞相关文件的工具，来源于 **Exploit-DB** 数据库。它在命令行中使用，并且可离线工作，因此是渗透测试人员在易受攻击系统上识别漏洞利用的便捷工具。
{% endhint %}

{% embed url="<https://www.exploit-db.com/searchsploit>" %}

#### **基本搜索**

你可以添加任意数量的搜索词。在下面的图片中，我们正在查找包含“oracle”和“windows”这两个词的漏洞利用。

```bash
searchsploit windows oracle 
```

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-6484b5137de35d13f68d0205484c4b9cf9b82476%2Fimage%20(1036).png?alt=media" alt=""><figcaption></figcaption></figure>

#### **将漏洞利用复制到剪贴板和目录：**

如果你想将漏洞利用复制到剪贴板，请使用“ -p ”。例如："searchsploit -p XYZ"，其中 XYZ 是漏洞利用 ID。如果你想将漏洞利用复制到当前工作目录，请使用“ -m ”。例如："searchsploit -m XYZ"，其中 XYZ 是漏洞利用 ID

```
searchsploit -m 44553
```

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-86e0a402450f7dcf0fdcfb630c73de4919e2db59%2Fimage%20(1037).png?alt=media" alt=""><figcaption></figcaption></figure>

#### **查看漏洞利用**

如果你想检查或研究一个漏洞利用，请使用“--examine”。例如："searchsploit XYZ --examine"，其中 XYZ 是漏洞利用 ID。

```bash
searchsploit 44553 -examine
```

<figure><img src="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-3070ec45d858f7eb961eda54c285fe08da23ff55%2Fimage%20(1038).png?alt=media" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/exploitation/searchsploit.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
