vuln

Match service versions to known CVEs and public exploits.

Updated Aug 23, 2026

Search Tags:#vulnerability #security analysis #penetration testing #nmap #exploit #cve

Ready to run

npx skills add https://github.com/duriandurino/openclawrino --skill vuln

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vuln
Source: https://github.com/duriandurino/openclawrino/tree/main/vuln
Command: npx skills add https://github.com/duriandurino/openclawrino --skill vuln

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, searchsploit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify known vulnerabilities in discovered services and software versions, allowing for risk assessment and prioritization before exploitation.

Core Features & Use Cases

CVE Matching: Maps service versions to known Common Vulnerabilities and Exposures (CVEs).
Exploitability Research: Utilizes tools like searchsploit and NVD API to find public exploits.
Vulnerability Analysis: Analyzes scan results and service versions for weaknesses.
Use Case: After an enumeration scan reveals Apache 2.4.41, this Skill can quickly identify if it's affected by CVE-2021-41773 and if a public exploit exists.

Quick Start

Use the vuln skill to research vulnerabilities for the service 'openssh' with version '8.2p1'.

Frequently Asked Questions about vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify known CVEs for a specific service version discovered during a scan?▼

To identify known CVEs for discovered services, this Skill cross-references service details and versions against NVD and Vulners APIs. It maps specific software versions to known vulnerabilities, enabling quick risk assessment before exploitation.

How do I find public exploits for vulnerabilities found on my network?▼

To find public exploits for vulnerabilities, cross-reference identified CVEs and service versions using searchsploit. This searches external exploit databases to determine if actionable, public exploits exist for the weaknesses found.

Do I need nmap and searchsploit installed to perform vulnerability analysis?▼

Yes, you need nmap and searchsploit installed to perform vulnerability analysis. These dependencies execute Nmap scripts and query external exploit databases, which are required for comprehensive CVE matching and threat assessment.

What is the best way to assess exploitability for software weaknesses found during penetration testing?▼

The best way to assess exploitability for software weaknesses is to analyze scan results against public exploit information. By cross-referencing service versions with known CVEs, you can quickly identify and prioritize exploitable targets.

Can I use Nmap scripts to map service versions to known vulnerabilities?▼

Yes, you can use Nmap scripts to map service versions to known vulnerabilities. The analysis utilizes Nmap scripts alongside external databases to identify exploitable weaknesses by matching discovered service details against known CVEs.