Search Exploits
search_exploitsBrowse and filter exploits by source, attack type, reliability, CVE, vendor, or author to find weaponizable PoCs, Metasploit modules, and exploit code for security testing.
Instructions
Browse and filter exploits using STRUCTURED FILTERS ONLY (no free-text query). Use this to filter by source (github, metasploit, exploitdb, nomisec, gitlab, inthewild, vulncheck_xdb, patchapalooza, oscs, poc_monitor), language (python, ruby, etc.), LLM classification (working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code), author, min stars, code availability, CVE ID, vendor, or product. Also filter by AI analysis: attack_type (RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak), complexity (trivial/simple/moderate/complex), reliability (reliable/unreliable/untested/theoretical), requires_auth. NOTE: To search by product name (e.g. 'OpenSSH', 'Apache'), use search_vulnerabilities instead — it has free-text query and get_vulnerability already includes exploits in the response. Examples: source='metasploit' for all Metasploit modules; attack_type='RCE' with reliability='reliable' for weaponizable RCE exploits; cve='CVE-2024-3400' for all exploits targeting a specific CVE; vendor='mitel' for all Mitel exploits.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| source | No | Filter by source | |
| language | No | Filter by language: python, ruby, go, c, etc. | |
| llm_classification | No | Filter by LLM classification | |
| attack_type | No | Filter by attack type from AI analysis (case-insensitive on input; canonical casing returned) | |
| complexity | No | Filter by exploit complexity | |
| reliability | No | Filter by exploit reliability | |
| requires_auth | No | Filter by whether exploit requires authentication | |
| author | No | Filter by author name | |
| min_stars | No | Minimum GitHub stars | |
| has_code | No | Only exploits with downloadable code | |
| cve | No | Filter by CVE ID (e.g. 'CVE-2024-3400') — returns all exploits for that CVE | |
| vendor | No | Filter by vendor name (e.g. 'mitel', 'fortinet') — returns exploits for all CVEs affecting that vendor | |
| product | No | Filter by product name (e.g. 'micollab', 'pan-os') | |
| sort | No | Sort order | |
| page | No | Page number (default: 1) | |
| per_page | No | Results per page (1-25, default: 10) |