searchsploit: offline exploit-db search

Once you have a service name and version from enumeration, searchsploit is the fastest way to check whether a public exploit already exists for it. No internet access is needed, as it queries a local exploit-db cached copy.

Usage

searchsploit "Microsoft Windows SMB"
searchsploit "vsftpd 2.3.4"

searchsploit -e "exact search string"       # exact match only
searchsploit -c "case sensitive string"     # case-sensitive
searchsploit -p <id>                        # show full path to a result
searchsploit -m <id>                        # copy the exploit into your working directory
searchsploit -x <id>                        # open/examine the exploit source directly
searchsploit -w <id>                        # show the exploit-db.com URL instead of the local path

# filter to results that have a matching Metasploit module
searchsploit "Microsoft Windows SMB" | grep -e "Metasploit"

Metasploit Framework — search inside msfconsole covers the module side of this lookup
db_autopwn — automates this matching for every host already in the MSF database
From service version to working exploit — the broader workflow this tool fits into