Install exploitdb with Homebrew, MacPorts, Nix, pacman

Project links

• Homepage
• Repository
• Package manager page

Commands and aliases

• searchsploit

Project history

The archive traces back to milw0rm, a public exploit archive started by str0ke in early 2004 after another exploit source moved behind a paid model. OffSec's history page presents milw0rm as a trusted community source because submitted exploits were verified before inclusion.

In July 2009, str0ke announced that milw0rm would close, then said it would continue temporarily because of community demand. OffSec took over the database in November 2009, launched the exploit-db.com domain that month, and continued the service as Exploit-DB.

The current GitLab repository is the official source tree for Exploit-DB exploits and shellcode, with companion repositories for binary exploits and papers. Its README says the repository is updated daily with recent submissions.

Adoption history

Exploit-DB became a standard reference because it preserved working exploit and proof-of-concept material in a searchable form. OffSec describes it as a non-profit public-service project and a CVE-compliant archive intended for penetration testers and vulnerability researchers.

SearchSploit turned the web archive into a local Unix workflow. The official manual documents Kali Linux packaging, Git installation, and Homebrew installation, and notes that the standard Kali GNOME build includes the exploitdb package by default.

How it is used

SearchSploit searches a local copy of Exploit-DB by one or more terms, with options for title-only searches, exact matching, CVE lookup, JSON output, Nmap XML correlation, path lookup, and mirroring selected exploits into a working directory.

The manual emphasizes offline use: a tester can take a local checkout into segregated or air-gapped networks, update it later, and optionally add binary-exploit and papers repositories for more complete local data.

Why package nerds care

Exploit-DB is a package-manager oddity: it is both a command-line program and a frequently updated vulnerability corpus. Installing it with Homebrew or apt gives users a filesystem tree of exploits plus a shell-oriented search interface.

For Unix users, the interesting part is not just the executable but the layout and update behavior: SearchSploit reads CSV indexes, points at exploit/shellcode/paper paths through .searchsploit_rc, and can be kept current through package updates or git.

Timeline

• 2004: str0ke starts a public exploit archive that becomes milw0rm.
• 2009-07-08: str0ke announces the site will close.
• 2009-11-04: OffSec is publicly reported as the group taking over the database.
• 2009-11-16: The OffSec handover goes live.
• 2009-11-17: exploit-db.com is set up.
• 2010: milw0rm closes for good after no longer accepting updates.
• 2016: SearchSploit users with older Kali packages are directed to update through the traditional package manager before using newer update behavior.

Related projects

• SearchSploit is the bundled command-line search tool for the local Exploit-DB repository.
• The Google Hacking Database is maintained by OffSec as an extension of Exploit-DB.
• exploitdb-bin-sploits and exploitdb-papers are companion repositories for binary exploit files and papers.

Sources

• https://www.exploit-db.com/history
• https://www.exploit-db.com/
• https://gitlab.com/exploit-database/exploitdb
• https://www.exploit-db.com/searchsploit