getsploit

No entries match these filters. Clear filters

1. docs update Sep 9, 2026 · issue 069

   getsploit v3 adds offline FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. search, JSON/JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory./TSVTSVA plain-text format storing tabular data with fields separated by tab characters, making it easy for cyber tools to parse and exchange structured records without a CSV parser's quoting complexity. output formats, --mirror, --color, and --status commands

   └──▷ TRY IT
   Build a local offline index once, then search it air-gapped — useful for restricted lab or red-team environments.
   copy

   $ getsploit --update
   getsploit --local 'title:eternalblue AND NOT description:metasploit'

   Pipe exploit IDs into a downstream tool by streaming JSON Lines output and extracting the id field with jq.
   copy

   $ getsploit --format jsonl wordpress | jq -r .id

   Save every matched exploit source file to disk for offline review before touching them on a target system.
   copy

   $ getsploit --local --mirror eternalblue

   • Adds --update flag to download the full exploit corpus and build a local SQLite FTS5 index (~1.7 GB) for fully offline search.
   • Adds --local flag to search the offline SQLite FTS5 index, supporting plain keywords, CVE IDs, and FTS5 column-filter expressions (id, title, published, description, source_data).
   • Adds --status flag to inspect the local database location, size, and document count without a network connection or API key.
   • Adds --mirror flag to write each matched exploit body to its own file, usable with both online and --local searches.
   • Adds --format json and --format jsonl output options; redirected output defaults to stable tab-separated records; --json remains an alias for --format json.

   +5 more show less

   • Adds --color always|never|auto flag to control ANSI colour output, with adaptive layout (table for wide terminals, stacked for narrow).
   • Adds VULNERS_API_KEY environment variable and --set-key prompt as the only accepted key-delivery paths — no --api-key CLI argument.
   • Adds GETSPLOIT_HOME environment variable to override the default local database location (~/.getsploit/getsploit.db).
   • Supports Python 3.11, 3.12, 3.13, and 3.14 on Linux, macOS, and Windows.
   • Automatically migrates databases built by Getsploit 2.x from FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine. to FTS5 on the next --update.
   • Adds --update flag to download the full exploit corpus and build a local SQLite FTS5 index (~1.7 GB) for fully offline search.
   • Adds --local flag to search the offline SQLite FTS5 index, supporting plain keywords, CVE IDs, and FTS5 column-filter expressions (id, title, published, description, source_data).
   • Adds --status flag to inspect the local database location, size, and document count without a network connection or API key.
   • Adds --mirror flag to write each matched exploit body to its own file, usable with both online and --local searches.
   • Adds --format json and --format jsonl output options; redirected output defaults to stable tab-separated records; --json remains an alias for --format json.

   +4 more show less

   • Adds --color always|never|auto flag to control ANSI colour output, with adaptive layout (table for wide terminals, stacked for narrow).
   • Adds VULNERS_API_KEY environment variable and --set-key prompt as the only accepted key-delivery paths — no --api-key CLI argument.
   • Adds GETSPLOIT_HOME environment variable to override the default local database location (~/.getsploit/getsploit.db).
   • Supports Python 3.11, 3.12, 3.13, and 3.14 on Linux, macOS, and Windows.

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !FTS4 proximity expressions such as one NEAR/5 two from Getsploit 2.x must be rewritten in FTS5 NEAR(...) form after migration.
2. docs update Sep 9, 2026 · issue 069

   getsploit: Adds --local flag to run queries against the local FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. index, supporting plain keyword queries (wordpress 4.7, CVE-2024-3094) and full SQLite FTS5 expressions with column filters (title:, id:, published:, description:, source_data:).

   └──▷ TRY IT
   Build the local offline exploit index once, then search it air-gapped — no API key or network needed.
   copy

   $ export VULNERS_API_KEY="your-key"
   getsploit --update
   getsploit --local 'title:eternalblue AND NOT description:metasploit'

   Stream exploit IDs for a product into a script by pulling JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. output and filtering with jq.
   copy

   $ getsploit --format jsonl wordpress 4.7 | jq -r .id

   Download every matched exploit source to disk for offline review after a local search.
   copy

   $ getsploit --local --mirror eternalblue

   • Adds --color always|never|auto flag to control ANSI colour output, enabling piping into pagers like less -R.
   • Adds --set-key subcommand to store the Vulners API key via a hidden confirmation prompt instead of a command-line argument; key is also readable from the VULNERS_API_KEY environment variable.
   • Supports --count above 100 with transparent pagination so large online result sets are fetched automatically.
   • Supports Lucene query syntax for online search and SQLite FTS5 expressions for offline search, including boolean operators, column filters, wildcards, and NEAR(...) proximity.
   • Adds --color always|never|auto flag to control ANSI colour output, enabling piping into pagers like less -R.
   • Adds --set-key subcommand to store the Vulners API key via a hidden confirmation prompt instead of a command-line argument; key is also readable from the VULNERS_API_KEY environment variable.
   • Supports Lucene query syntax for online search and SQLite FTS5 expressions for offline search, including boolean operators, column filters, wildcards, and NEAR(...) proximity.

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine. proximity expressions (one NEAR/5 two) from databases built with Getsploit 2.x must be rewritten in the FTS5 NEAR(...) form after the next --update migrates them to FTS5.
3. docs update Aug 18, 2026 · issue 049

   getsploit gets full offline FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. search, multi-format output, mirror mode, and color/terminal controls

   └──▷ TRY IT
   Build the local exploit index then search entirely offline — useful in air-gapped or no-network environments.
   copy

   $ getsploit --update && getsploit --local 'title:eternalblue AND NOT description:metasploit'

   Pipe JSON Lines results into jq to extract exploit IDs for downstream processing in a CI or reporting pipeline.
   copy

   $ getsploit --format jsonl wordpress | jq -r .id

   Mirror exploit source files from an offline search for manual review before any execution.
   copy

   $ getsploit --local --mirror eternalblue

   • Adds --update to download the full exploit corpus archive over eight parallel range connections and build/atomically replace the local FTS5 index (~1.7 GB) at ~/.getsploit/getsploit.db (or $GETSPLOIT_HOME).
   • Adds --status to report the local database location, size, and document count without requiring an API key.
   • Adds --format flag supporting json, jsonl, and tab-separated (TSVTSVA plain-text format storing tabular data with fields separated by tab characters, making it easy for cyber tools to parse and exchange structured records without a CSV parser's quoting complexity.) output; --json remains an alias for --format json; redirected output automatically switches to tab-separated values.
   • Adds --mirror flag to save each exploit body to its own file in a per-query directory, usable with both online (--mirror) and offline (--local --mirror) searches; files are created without following symlinks and never overwrite existing files.
   • Adds --color flag with values always, never, and auto (default) to control terminal color and decoration; wide terminals render a table, narrow terminals render stacked records.

   +4 more show less

   • Adds --set-key subcommand to store the Vulners API key via a hidden confirmation prompt into a private file under the Getsploit home directory; the VULNERS_API_KEY environment variable takes precedence over the stored file.
   • Supports Lucene syntax for online queries (e.g. title:wordpress AND description:"code execution") with transparent pagination above 100 results.
   • Databases built by Getsploit 2.x (FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine.) remain searchable and are automatically migrated to FTS5 on the next --update; FTS4 one NEAR/5 two proximity expressions must be rewritten as FTS5 NEAR(...) form.
   • Supports Python 3.11 through 3.14 on Linux, macOS, and Windows.

   9 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !FTS4 proximity expressions such as one NEAR/5 two must be rewritten in the FTS5 NEAR(...) form after the database is migrated from Getsploit 2.x.
4. docs update Aug 18, 2026 · issue 049

   getsploit 3.0.0 overhauls search with async Vulners SDK, Rich terminal output modes, and a versioned SQLite FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. index

   └──▷ TRY IT
   Check local database size and path after upgrading to the new FTS5 index.
   copy

   $ getsploit --status

   • Adds asynchronous online search through the official Vulners Python SDK 4.1, replacing direct HTTP access to Vulners endpoints.
   • Adds adaptive Rich terminal output with table, compact, JSON, and JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. display modes.
   • Adds a versioned SQLite FTS5 index with integrity checks and atomic replacement, converting existing local FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine. archives during --update.
   • Adds local database status reporting via --status, including database size and full database path.
   • Adds detailed progress reporting for --update: download shows bytes and throughput, unpacking and document conversion show a bar with totals and time remaining, and indeterminate steps stay indeterminate.

   +5 more show less

   • Rebuilds --count above 100 to page through results rather than silently returning only the first 100, advancing by rows received.
   • Supports Python 3.11–3.14 with a reproducible uv lockfile.
   • Downloads database archives atomically through eight parallel range connections, keeping archives on disk throughout installation instead of buffering in memory.
   • Adds hidden, atomic storage for the optional legacy API-key file.
   • FTS4 NEAR/n expressions in local indexes now require the equivalent FTS5 NEAR(...) form after conversion.

   10 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --api-key VALUE option is removed; use the API-key file instead.
   • !Direct HTTP access to Vulners endpoints is removed; all online search goes through the Vulners Python SDK.
   • !Runtime dependencies on httpx, orjson, and texttable are removed.
   • !Local FTS4 archives are converted to an FTS5 index during --update; rebuilt indexes use FTS5 query syntax, so FTS4 NEAR/n expressions must be rewritten as NEAR(...) in FTS5 form.
5. docs update Aug 18, 2026 · issue 049

   Getsploit gains offline FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. search, multi-format output, mirroring, and pipe-friendly TSVTSVA plain-text format storing tabular data with fields separated by tab characters, making it easy for cyber tools to parse and exchange structured records without a CSV parser's quoting complexity./JSON/JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. modes

   └──▷ TRY IT
   Build the local offline index once, then search without a network connection or API key.
   copy

   $ getsploit --update
   getsploit --local 'title:eternalblue AND NOT description:metasploit'

   Stream exploit IDs matching a query into jq for downstream pipeline processing.
   copy

   $ getsploit --format jsonl wordpress | jq -r .id

   Mirror all exploit source files for a CVE locally for offline review before use.
   copy

   $ getsploit --local --mirror CVE-2024-3094

   • Adds --local flag for fully offline exploit search against a local SQLite FTS5 index, supporting literal keyword queries and full FTS5 expressions with searchable columns id, title, published, description, source_data.
   • Adds --update to download the full exploit corpus archive over eight parallel range connections and build or atomically replace the local FTS5 index (~1.7 GB); a running search against the old database finishes undisturbed.
   • Adds --status to report local index location, size, and document count without requiring an API key.
   • Adds --format json and --format jsonl output modes; --json remains an alias for --format json.
   • Adds --mirror flag to write each exploit body to its own file in a query-derived directory, usable with both online and --local searches; files are created without following symlinks and never overwrite existing files.

   +7 more show less

   • Adds --color always|never|auto to control ANSI colour; auto-detects terminal width to choose between table, stacked-record, and tab-separated output.
   • Adds --set-key to store a Vulners API key via a hidden confirmation prompt into a private file under the Getsploit home directory; the VULNERS_API_KEY environment variable takes precedence over the stored file.
   • Redirected output automatically produces stable tab-separated records (no colour or decoration), making the tool pipe-friendly without extra flags.
   • Supports Lucene syntax pass-through for online queries and SQLite FTS5 expression syntax (including NEAR(...), boolean operators, column filters, wildcards) for offline queries.
   • Local database stored at ~/.getsploit/getsploit.db by default, overridable with $GETSPLOIT_HOME environment variable.
   • Migrates databases built by Getsploit 2.x from FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine. to FTS5 on next --update; legacy sourceData: column spelling still accepted.
   • Supports Python 3.11 through 3.14 on Linux, macOS, and Windows with Vulners SDK 4.1+.

   12 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !FTS4 proximity expressions such as one NEAR/5 two in local queries must be rewritten in the FTS5 NEAR(...) form after migrating a Getsploit 2.x database.
6. docs update Aug 18, 2026 · issue 049

   Getsploit gains offline FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. search, multi-format output, mirroring, and color/layout control against the full Vulners exploit corpus

   └──▷ TRY IT
   Build a local offline index once, then search for exploits without any network access.
   copy

   $ getsploit --update
   getsploit --local 'title:eternalblue AND NOT description:metasploit'

   Pipe offline exploit IDs into jq or other tools using JSON Lines output.
   copy

   $ getsploit --local --format jsonl wordpress 4.7 | jq -r .id

   Download and save exploit source files locally for manual review before any analysis.
   copy

   $ getsploit --local --mirror eternalblue

   • Adds --local flag for fully offline search against a local SQLite FTS5 index of the full exploit corpus (~1.7 GB), stored at ~/.getsploit/getsploit.db or $GETSPLOIT_HOME.
   • Adds --update to download the exploit archive over eight parallel range connections and atomically build or replace the local FTS5 index without interrupting in-progress searches.
   • Adds --status to report the local index location, size, and document count without requiring an API key.
   • Adds --format json and --format jsonl output modes for machine-readable results; --json is retained as an alias for --format json.
   • Redirected output automatically switches to stable tab-separated values (TSVTSVA plain-text format storing tabular data with fields separated by tab characters, making it easy for cyber tools to parse and exchange structured records without a CSV parser's quoting complexity.) with no color or decoration, making pipe-friendly workflows possible without extra flags.

   +6 more show less

   • Adds --mirror to write each matching exploit body to its own file in a directory derived from the query, without following symlinks and without overwriting existing files.
   • Adds --color always|never|auto to control terminal color; wide terminals render a table, narrow terminals render stacked records, and redirected streams receive TSV.
   • Adds --set-key to store a Vulners API key via a hidden confirmation prompt into a private file under the Getsploit home directory; the VULNERS_API_KEY environment variable takes precedence over the stored key.
   • Supports FTS5 column-filter and boolean expressions in offline queries (e.g. title:eternalblue AND NOT description:metasploit) across searchable columns id, title, published, description, and source_data; the legacy sourceData: spelling is still accepted.
   • Supports Vulners Lucene syntax in online queries with transparent pagination above 100 results (no single API response exceeds 100 documents).
   • Searches against Exploit-DB, Metasploit, Packet Storm, Zero Day Initiative, GitHub proof-of-concepts, and all other collections indexed by Vulners.

   11 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Databases built by Getsploit 2.x are migrated from FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine. to FTS5 on the next --update; FTS4 proximity expressions such as one NEAR/5 two must be rewritten in the FTS5 NEAR(...) form.
7. v3.0.0 Aug 17, 2026 · issue 049

   getsploit v3.0.0 adds async Vulners SDK search, FTS5FTS5A full-text search extension built into SQLite that lets tools index and query large bodies of text efficiently, with ranking and phrase-match support, without an external search engine. local index, Rich output modes (table/compact/JSON/JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory.), and paginated --count.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.0.0 https://github.com/vulnersCom/getsploit.git
   # already have the repo? check out this version:
   $ git checkout v3.0.0

   • Adds VULNERS_API_KEY environment variable and --set-key as the supported methods for supplying API credentials, replacing the removed --api-key VALUE option.
   • Adds adaptive Rich terminal output with table, compact, JSON, and JSONL modes for search results.
   • Adds local database status reporting via --status, now showing database size and full database path.
   • Upgrades local search to a versioned SQLite FTS5 index with integrity checks and atomic replacement, converting existing FTS4FTS4A full-text search extension for SQLite, maintained as part of the SQLite project, that lets tools index and query large bodies of text efficiently without a separate search engine. archives during --update.
   • Adds detailed progress reporting for --update: bytes and throughput for download, a bar with totals and time remaining for unpacking and conversion.

   +3 more show less

   • Enables asynchronous online search through the Vulners Python SDK 4.1.
   • Paginates results when --count exceeds 100, advancing by rows received so no documents are skipped.
   • Downloads database archives through eight parallel range connections atomically, keeping them on disk instead of buffering in memory.

   8 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --api-key VALUE option is removed; replace it with the VULNERS_API_KEY environment variable or --set-key.
   • !Local indexes rebuilt under v3.0.0 use FTS5 query syntax; FTS4 NEAR/n expressions must be rewritten as the equivalent FTS5 NEAR(...) form.
   • !Direct HTTP access to Vulners endpoints is removed; all online search now goes through the Vulners Python SDK.
   • !Runtime dependencies on httpx, orjson, and texttable are removed; environments that installed those transitively through getsploit may need adjustment.
8. v2.0.2 Sep 10, 2025 · release notes

   getsploit v2.0.2 adds flexible API key management via flag, env var, or saved config and unmodified query passthrough.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.0.2 https://github.com/vulnersCom/getsploit.git
   # already have the repo? check out this version:
   $ git checkout v2.0.2

   └──▷ TRY IT
   Persist your Vulners API key once so every subsequent getsploit run is authenticated without extra flags.
   copy

   $ getsploit --set-key YOUR-KEY

   Narrow results to a specific product version by scoping the query to the title field only.
   copy

   $ getsploit title:wordpress AND title:"4.7.0"

   • Adds --set-key command to persist a Vulners API key for the current user.
   • Adds --api-key flag to supply a Vulners API key per invocation.
   • Supports VULNERS_API_KEY environment variable for API key injection with defined resolution priority (--api-key > env var > saved key).
   • Passes search queries as-is without modification, enabling field-scoped queries such as title:wordpress AND title:"4.7.0".
   • Exposes searchable fields: id, title, description, sourceData, and published.

   5 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Minimum supported Python version raised to 3.10; setups running Python 3.9 or earlier will no longer work.