Hey folks, if you are a CTF player or bug bounty hunter, then this article can be useful for you, because in this tutorial we will present you a tool, with the help of which we can find the latest exploits with the command line. As we know that most of the time we try to find exploits on Google, which takes time, but it will make our work easier and we can also find direct links to the exploits.
Lets do it 🙂 !!
Like every time, this time also we will download this tool from the github page by using the git command.
git clone https://github.com/1N3/Findsploit.git
Now we will going into the directory by cd command.
To start this, we will give some permission.
chmod +x *
Tool is ready for installation we need execute the given command.
After doing all this we can start this tool by executing “findploit” on the terminal.
In our first attempt we will try to find all nmap scripts by using the following command.
Its also provide the nmap exploits 🙂
Metasploit Auxiliary Modules
As we know that auxiliary modules is used to get information about victim. Now we will examine how many auxiliary modules are in Metasploit.
This tool can also be useful to find the total number of payloads. Although we can find almost all metaspaloit modules with the help of this tool.
To get the best results we can add filters like the one below.
findsploit payloads | grep windows
In this effort, we will look for exploits with names.
findsploit Multi Scheduler 1.0
Lets take a another example and try to find some cms exploits.
findsploit gila cms
In fact it can be a helpful tool for a CTF player after seeing shocking results 🙂 !!
A keen learner and passionate IT student. He has done Web designing, CCNA, RedHat, Ethical hacking, Network & web penetration testing. Currently, he is completing his graduation and learning about Red teaming, CTF challenges & Blue teaming.