ExploitDB, sometimes stylized as Exploit Database or Exploit-Database, is a public and open source
vulnerability database maintained by
Offensive Security. It is one of the largest and most popular exploit databases in existence. While the database is publicly available via their website, the database can also be used by utilizing the
command-line tool
A console application or command-line program is a computer program (applications or utilities) designed to be used via a text-only user interface.
A console application can be used with a computer terminal, a system console, or a terminal emu ...
which is native to
Kali Linux
Kali Linux is a Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security. The software is based on the Debian''Testing'' branch: most packages Kali uses are imported from the De ...
.
The database also contains
proof-of-concepts (POCs), helping information security professionals learn new exploit variations. In ''Ethical Hacking and Penetration Testing Guide'',
Rafay Baloch said Exploit-db had over 20,000 exploits, and was available in
BackTrack Linux by default. In ''CEH v10 Certified Ethical Hacker Study Guide'', Ric Messier called exploit-db a "great resource", and stated it was available within Kali Linux by default, or could be added to other
Linux distributions
A Linux distribution, often abbreviated as distro, is an operating system that includes the Linux kernel for its kernel (operating system), kernel functionality. Although the name does not imply distribution (marketing), product distribution pe ...
.
The current maintainers of the database, Offensive Security, are not responsible for creating the database. The database was started in 2004 by a hacker group known as
milw0rm
Milw0rm is a group of hacktivists best known for penetrating the computers of the Bhabha Atomic Research Centre (BARC) in Mumbai, the primary nuclear research facility of India, on June 3, 1998. The group conducted hacks for political reasons, in ...
and has changed hands several times.
As of 2023, the database contained 45,000 entries from more than 9,000 unique authors.
See also
*
Offensive Security
*
Offensive Security Certified Professional
References
External links
* {{Official website
Internet properties established in 2004
Pentesting software toolkits
Security vulnerability databases