Giter Club home page Giter Club logo

sploitctl's Introduction

Description

Script to fetch, install, update and search exploit archives from well-known sites like packetstormsecurity.org and exploit-db.com.

In the latest version of the Blackarch Linux it has been added to /usr/share/exploits directory.

Installation

pacman -S sploitctl

Usage

[ noptrix@blackarch-dev ~/blackarch/repos/sploitctl ]$ sploitctl -H
--==[ sploitctl by blackarch.org ]==--

usage:

  sploitctl -f <arg> [options] | -u <arg> [options] | -s <arg> [options] | <misc>

options:

  -f <num>   - download exploit archives from chosen sites
             - ? to list sites
  -u <num>   - update exploit archive from chosen installed archive
             - ? to list downloaded archives
  -d <dir>   - exploits base directory (default: /usr/share/exploits)
  -s <regex> - exploits to search using <regex> in base directory
  -t <num>   - max parallel downloads (default: 4)
  -r <num>   - max retry failed downloads (default: 3)
  -A <str>   - set useragent string
  -P <str>   - set proxy (format: proto://user:pass@host:port)
  -X         - decompress archive
  -R         - remove archive after decompression

misc:

  -V         - print version of sploitctl and exit
  -H         - print this help and exit

example:

  # download and decompress all exploit archives and remove archive
  $ sploitctl -f 0 -XR

  # download all exploits in packetstorm archive
  $ sploitctl -f 4

  # list all available exploit archives
  $ sploitctl -f ?

  # download and decompress all exploits in m00-exploits archive
  $ sploitctl -f 2 -XR

  # download all exploits archives using 20 threads and 4 retries
  $ sploitctl -r 4 -f 0 -t 20

  # download lsd-pl-exploits to "~/exploits" directory
  $ sploitctl -f 3 -d ~/exploits

  # download all exploits with using tor socks5 proxy
  $ sploitctl -f 0 -P "socks5://127.0.0.1:9050"

  # download all exploits with using http proxy and noleak useragent
  $ sploitctl -f 0 -P "http://127.0.0.1:9060" -A "noleak"

  # list all installed exploits available for download
  $ sploitctl -u ?

  # update all installed exploits with using http proxy and noleak useragent
  $ sploitctl -u 0 -P "http://127.0.0.1:9060" -A "noleak" -XR

notes:

  * sploitctl update's id are relative to the installed archives
    and are not static, so by installing an exploit archive it will
    show up in the update section so always do a -u ? before updating.

Get Involved

You can get in touch with the BlackArch Linux team. Just check out the following:

Please, send us pull requests!

Web: https://www.blackarch.org/

Mail: [email protected]

IRC: irc://irc.freenode.net/blackarch

sploitctl's People

Contributors

alfberdi avatar archey avatar noptrix avatar nrzizrn avatar pedrosfreitas avatar sepehrdaddev avatar viralmaniar avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

sploitctl's Issues

undefined symbol: git_worktree_prune_init_options

I'm running Manjaro with Black Arch repositories. Sploitctl installs nicely with pacman but while running I get this:

Error while loading dependencies: /usr/lib/python3.8/site-packages/_pygit2.cpython-38-x86_64-linux-gnu.so: undefined symbol: git_worktree_prune_init_options

Pygit2 is installed. Same thing once cloned from the git repo.

search for exploitdb not work

search for exploits in exploitdb will not work,
because regex go through filenames, which are for example 27526.tgz

instead in looking in exploitdb/files_{exploits, shellcodes}.csv and
return second column, seperated by ',' for filename and third for description

Bug: git reconfigured by script

The following lines:

git config user.email "foo@bar"
git config user.name "foo bar"

act reconfiguring by personal git config each time i use sploitctl, coud you consider removing them ?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.