Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/nicolas-carolo/houndsploit
An advanced graphical search engine for Exploit-DB
https://github.com/nicolas-carolo/houndsploit
exploit-db exploits number-filtering penetration-testing search-engine shellcodes
Last synced: 21 days ago
JSON representation
An advanced graphical search engine for Exploit-DB
- Host: GitHub
- URL: https://github.com/nicolas-carolo/houndsploit
- Owner: nicolas-carolo
- License: bsd-3-clause
- Created: 2018-11-20T13:21:47.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2024-05-29T16:45:44.000Z (7 months ago)
- Last Synced: 2024-08-05T17:34:48.795Z (4 months ago)
- Topics: exploit-db, exploits, number-filtering, penetration-testing, search-engine, shellcodes
- Language: Python
- Homepage: https://nicolascarolo.tk/projects/houndsploit/
- Size: 107 MB
- Stars: 116
- Watchers: 11
- Forks: 20
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.rst
- Contributing: CONTRIBUTING.rst
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Authors: AUTHORS
Awesome Lists containing this project
- awesome-hacking-lists - nicolas-carolo/houndsploit - An advanced graphical search engine for Exploit-DB (Python)
README
# HoundSploit
Author: Nicolas Carolo
Copyright: © 2021, Nicolas Carolo.
Date: 2021-11-26
Version: 2.8.0
## PURPOSE
_HoundSploit_ is an advanced search engine for Exploit-DB developed in
Python using Flask as micro web framework, born with the aim of showing the user
the most accurate search results.
### Features
* Effective version number filtering
* Advanced filtering
* Sort by date and description
* Fast search
* Search suggestions with customization
* Syntax highlighting of the source code of exploits and shellcodes
* Downloading of the source code of exploits and shellcodes
* Highlighting of searched words in search results
* Bookmarks
* Fix of exploit and shellcode dates
* Check for updates (both for software and database)
#### New features in HoundSploit 2
* Flask instead of Django
* SQLAlchemy instead of Django ORM
* The kernel of the search engine is the same used in [_hsploit_](https://github.com/nicolas-carolo/hsploit), which is the CLI version of HoundSploit
* Dark and Light themes
#### Effective version number filtering examples
##### Example I
11 exploits and 0 shellcodes found for "WordPress Core 2.0.2"
##### Example II
16 exploits and 0 shellcodes found for "Linux Kernel 4.2.3"
#### Advanced filtering
Using advanced search you can use the following filters for filtering search
results:
* Search operator: `AND` or `OR`
* Author
* Type
* Platform
* Port
* Date interval
#### Search suggestion
You can choose to show a particular suggestion for a given searched string.
For each case you can also decide to use automatic replacement or not.
It is possible to add new suggestions and delete the existing suggestions.
#### Bookmarks
You can add exploits and shellcodes to bookmarks and filter them using the searchbox.
#### Customization
You can choose to use:
* The Light or the Dark theme
* The original ExploitDB database or the ExploitDB database with dates fix.
## MINIMUM REQUIREMENTS
### Supported OS
* Linux
* macOS
* Windows (Preview)
### Interpreter and tools
* Python 3
* SQLite 3
* git
* curl
## INSTALLATION
### Linux (non-root user) [recommended]
In order to install _HoundSploit_ we have to run the following commands:
```sh
$ git clone https://github.com/nicolas-carolo/houndsploit
$ cd houndsploit
$ ./install_db_linux.sh
$ pip install -r requirements.txt
$ python setup.py install
```
Now you can remove the repository of _HoundSploit_ you have downloaded, because this repository has been cloned in `~/.HoundSploit/houndsploit` for supporting automatic updates.
If you have already installed the version 2.1.0 of _hsploit_ or you never installed _hsploit_, you can check if there is the directory `~/HoundSploit` and then you can delete it.
### Linux (root user)
In order to install _HoundSploit_ we have to run the following commands:
```sh
$ git clone https://github.com/nicolas-carolo/houndsploit
$ cd houndsploit
$ mkdir /root/.HoundSploit
$ touch /root/.HoundSploit/enable_root.cfg
$ ./install_db_linux.sh
$ pip install -r requirements.txt
$ python setup.py install
```
Now you can remove the repository of _HoundSploit_ you have downloaded, because this repository has been cloned in `~/.HoundSploit/houndsploit` for supporting automatic updates.
If you have already installed the version 2.1.0 of _hsploit_ or you never installed _hsploit_, you can check if there is the directory `~/HoundSploit` and then you can delete it.
### macOS
In order to install _HoundSploit_ we have to run the following commands:
```sh
$ git clone https://github.com/nicolas-carolo/houndsploit
$ cd houndsploit
$ ./install_db_darwin.sh
$ pip3 install -r requirements.txt
$ python3 setup.py install
```
Now you can remove the repository of _HoundSploit_ you have downloaded, because this repository has been cloned in `~/.HoundSploit/houndsploit` for supporting automatic updates.
If you have already installed the version 2.1.0 of _hsploit_ or you never installed _hsploit_, you can check if there is the directory `~/HoundSploit` and then you can delete it.
### Windows (Preview)
Before proceding with the installation, be sure that you have installed Python from the [official site](https://www.python.org/downloads/) and not from the Windows Store
Run a _PowerShell_ session as _Administrator_
```powershell
PS> git clone https://github.com/nicolas-carolo/houndsploit
PS> cd houndsploit
PS> powershell.exe -ExecutionPolicy Bypass -File .\install_db_windows.ps1
PS> pip install -r requirements.txt
PS> python setup.py install
```
Now you can remove the repository of _HoundSploit_ you have downloaded, because this repository has been cloned in `~\.HoundSploit\houndsploit` for supporting automatic updates.
### Troubleshooting
If you encounter problems during the installation phase, please run:
```sh
$ rm -fr ~/.HoundSploit
```
and then repeat the installation phase.
## USAGE
1. Run _HoundSploit_ server:
```sh
$ houndsploit
```
2. Go to `http://localhost:5000`
## COPYRIGHT
Copyright © 2021, Nicolas Carolo.
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:
1. Redistributions of source code must retain the above copyright
notice, this list of conditions, and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions, and the following disclaimer in the
documentation and/or other materials provided with the distribution.
3. Neither the name of the author of this software nor the names of
contributors to this software may be used to endorse or promote
products derived from this software without specific prior written
consent.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.