check-exploit

Searches exploit databases and returns a triage table of findings for a given service, version, or CVE.

30|6|Updated May 13, 2026
One-click install
npx skills add https://github.com/Rifteo/skills --skill check-exploit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: check-exploit
Source: https://github.com/Rifteo/skills/tree/main/check-exploit
Command: npx skills add https://github.com/Rifteo/skills --skill check-exploit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, searchsploit, msfconsole, pompem, python3-cisa-kev-check, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security analysts to systematically search and triage known exploit databases, providing a structured and prioritized list of exploit findings for a given service, version, CVE, or technology stack.

Core Features & Use Cases

  • Exploit Database Search: Systematically searches across major exploit sources including searchsploit, Metasploit, Vulners, Sploitus, and more.
  • Triage and Classification: Classifies exploit findings by type, authentication requirements, reliability, and complexity.
  • Output Format: Provides a detailed output format for each source checked, including exploit ID, title, type, and notes on whether a working PoC or weaponized exploit exists.
  • Use Case: When performing a pentest or incident response, this Skill can be used to quickly identify and validate existing exploits for identified vulnerabilities.

Quick Start

Run the Skill with the service or version you want to search. For example, 'check-exploit apache 2.4.49'.

Frequently Asked Questions about check-exploit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I systematically search exploit databases for a specific service version?

To systematically search exploit databases for a specific service version, this Skill queries sources like searchsploit and Metasploit using the provided service or version string, returning a structured triage table of findings.

What is exploit triage and how does it classify findings during a pentest?

Exploit triage classifies findings by type, authentication requirements, reliability, and complexity, helping security analysts prioritize known exploits during penetration testing or incident response.

Can I use Metasploit and searchsploit together to find known vulnerabilities for a CVE?

Yes, you can use this Skill to search both Metasploit and searchsploit simultaneously for a given CVE, generating a consolidated list of exploit IDs, titles, and notes on working PoCs.

Do I need Python libraries installed to run local exploit searches?

Yes, you need Python3 and specific libraries installed to run local exploit searches and generate exploit URLs, as the Skill relies on local scripts and dependencies like msfconsole and pompem.

What is the best way to identify weaponized exploits for an identified vulnerability?

The best way to identify weaponized exploits is to run a systematic search across Vulners and Sploitus, which outputs detailed notes indicating whether a working PoC or weaponized exploit exists for the vulnerability.

Does this exploit search approach handle different types of input formats?

Yes, the exploit search approach handles different types of input including service names, version numbers, CVEs, and technology stacks to perform a comprehensive search across multiple exploit sources.