# Search Exploits {% hint style="success" %} Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)
Support HackTricks * Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! * **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.** * **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
{% endhint %}
\ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&utm_campaign=ppc&utm_content=search-exploits) to easily build and **automate workflows** powered by the world's **most advanced** community tools.\ Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=search-exploits" %} ### Browser ํ•ญ์ƒ "google" ๋˜๋Š” ๋‹ค๋ฅธ ๊ณณ์—์„œ ๊ฒ€์ƒ‰ํ•˜์„ธ์š”: **\ \[version] exploit** ๋˜ํ•œ [https://exploits.shodan.io/](https://exploits.shodan.io)์—์„œ **shodan** **exploit search**๋ฅผ ์‹œ๋„ํ•ด ๋ณด์„ธ์š”. ### Searchsploit ์ฝ˜์†”์—์„œ **exploitdb**์˜ ์„œ๋น„์Šค์— ๋Œ€ํ•œ exploit์„ ๊ฒ€์ƒ‰ํ•˜๋Š” ๋ฐ ์œ ์šฉํ•ฉ๋‹ˆ๋‹ค. ```bash #Searchsploit tricks searchsploit "linux Kernel" #Example searchsploit apache mod_ssl #Other example searchsploit -m 7618 #Paste the exploit in current directory searchsploit -p 7618[.c] #Show complete path searchsploit -x 7618[.c] #Open vi to inspect the exploit searchsploit --nmap file.xml #Search vulns inside an nmap xml result ``` ### Pompem [https://github.com/rfunix/Pompem](https://github.com/rfunix/Pompem)์€ ์ต์Šคํ”Œ๋กœ์ž‡์„ ๊ฒ€์ƒ‰ํ•˜๊ธฐ ์œ„ํ•œ ๋˜ ๋‹ค๋ฅธ ๋„๊ตฌ์ž…๋‹ˆ๋‹ค. ### MSF-Search ```bash msf> search platform:windows port:135 target:XP type:exploit ``` ### PacketStorm ์•„๋ฌด๊ฒƒ๋„ ๋ฐœ๊ฒฌ๋˜์ง€ ์•Š์œผ๋ฉด [https://packetstormsecurity.com/](https://packetstormsecurity.com)์—์„œ ์‚ฌ์šฉ๋œ ๊ธฐ์ˆ ์„ ๊ฒ€์ƒ‰ํ•ด ๋ณด์„ธ์š”. ### Vulners vulners ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์—์„œ๋„ ๊ฒ€์ƒ‰ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค: [https://vulners.com/](https://vulners.com) ### Sploitus ์ด๊ฒƒ์€ ๋‹ค๋ฅธ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์—์„œ ์ต์Šคํ”Œ๋กœ์ž‡์„ ๊ฒ€์ƒ‰ํ•ฉ๋‹ˆ๋‹ค: [https://sploitus.com/](https://sploitus.com) ### Sploitify GTFOBins์™€ ์œ ์‚ฌํ•œ ํ•„ํ„ฐ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์ทจ์•ฝ์  ์œ ํ˜•(๋กœ์ปฌ ๊ถŒํ•œ ์ƒ์Šน, ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ ๋“ฑ), ์„œ๋น„์Šค ์œ ํ˜•(์›น, SMB, SSH, RDP ๋“ฑ), ์šด์˜ ์ฒด์ œ ๋ฐ ์‹ค์Šต ๋žฉ(์ต์Šคํ”Œ๋กœ์ž‡์„ ๊ฐ€์ง€๊ณ  ๋†€ ์ˆ˜ ์žˆ๋Š” ๋จธ์‹ ์— ๋Œ€ํ•œ ๋งํฌ)์œผ๋กœ ์ •๋ฆฌ๋œ ์ต์Šคํ”Œ๋กœ์ž‡ ๋ชฉ๋ก: [https://sploitify.haxx.it](https://sploitify.haxx.it) ### search_vulns search_vulns๋Š” ์•Œ๋ ค์ง„ ์ทจ์•ฝ์ ๊ณผ ์ต์Šคํ”Œ๋กœ์ž‡์„ ๊ฒ€์ƒ‰ํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•ด์ค๋‹ˆ๋‹ค: [**https://search-vulns.com/**](https://search-vulns.com/). NVD, Exploit-DB, PoC-in-GitHub, GitHub ๋ณด์•ˆ ์ž๋ฌธ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๋ฐ endoflife.date์™€ ๊ฐ™์€ ๋‹ค์–‘ํ•œ ๋ฐ์ดํ„ฐ ์†Œ์Šค๋ฅผ ํ™œ์šฉํ•ฉ๋‹ˆ๋‹ค.
\ [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&utm_campaign=ppc&utm_content=search-exploits)๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์„ธ๊ณ„์—์„œ **๊ฐ€์žฅ ์ง„๋ณด๋œ** ์ปค๋ฎค๋‹ˆํ‹ฐ ๋„๊ตฌ๋กœ ๊ตฌ๋™๋˜๋Š” **์›Œํฌํ”Œ๋กœ์šฐ๋ฅผ ์‰ฝ๊ฒŒ ๊ตฌ์ถ•ํ•˜๊ณ  ์ž๋™ํ™”**ํ•˜์„ธ์š”.\ ์˜ค๋Š˜ ์•ก์„ธ์Šคํ•˜์„ธ์š”: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=search-exploits" %} {% hint style="success" %} AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)
HackTricks ์ง€์›ํ•˜๊ธฐ * [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! * **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** * **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) GitHub ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.**
{% endhint %}