SploitScan - SploitScan is a sophisticated cybersecurity utilit

项目说明

SploitScan

!SPLOITSCAN-LOGO
!
!License

📜 Description

SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known and their respecti probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply known and test exploits. It's particularly for professionals seeking to enhance their security measures or develop robust detection strategies against emerging threats.

📖 Table of contents

📜 Description

🌟 Features

💣 Supported Exploit Databases

📁 Supported Scanner Import

⚙️ Installation

🚀 Usage

🤖 AI-Powered Risk Assessment

🛡️ Patching Priority System

🫱🏼‍🫲🏽 Contributing

📌 Author

📆 Changelog

🌟 Features

C Retrieval

Retrie information about .

EPSS Integration

Check the likelihood of exploitation with data from the Exploit Prediction Scoring System.

Public Exploits Aggregation

Collect publicly a exploit data to help you understand the context of each .

CISA KE

Quickly see if a is listed in CISA’s Known Exploited catalog.

AI-Powered Risk Assessment

Get risk assessments using multiple AI pro (OpenAI ChatGPT, Google Gemini, Grok AI, or DeepSeek) that explain potential risks and offer mitigation ideas.

HackerOne Reports

Find out if a has been in in HackerOne bug bounty reports, including basic ranking and se details.

Patching Priority System

Receive a simple priority rating for patching based on CVSS, EPSS, and a exploit information.

Multi-C and Export Options

Work with multiple CVEs at once and export the results to HTML, JSON, or CS.

Scanner Import

Import scan results from popular scanners (Nessus, Nexpose, OpenVAS, Docker) to directly search for known exploits. Now supports directory-based import with --input-dir for batch processing multiple reports.

Granular Method Selection

Choose which specific data retrie to run (such as CISA, EPSS, HackerOne, AI, etc.) so you only get the information you need.

Local C Update & Cloning

Maintain a local copy of the CVE List V5 repository. This lets you update the full CVE data on your machine for offline use and search.

Keyword-Based C Across Sources

Search for CVEs by keywords (for example, “Apple”) across both your local database and remote sources like CISA and Nuclei Templates.

Fast Mode for Streamlined Output

Use fast mode to display only the basic C, skipping extra lookups for quicker results.

User-Friendly Interface

Enjoy a clear and straightforward interface that presents all the information in an easy-to-read format.

!sploitscan_v0 10 4

💣 Supported Exploit Databases

GitHub

ExploitDB

(requires a free API key)

Nuclei

Metasploit

📁 Supported Scanner Import

Nessus (.nessus)

Nexpose (.xml)

OpenVAS (.xml)

Docker (.json)

⚙️ Installation

GitHub

pip

Kali/Ubuntu/Debian (might not the latest )

Obtaining API Keys

: Sign up for a free account at to get your API key.

OpenAI: Create an account and get an API key at OpenAI.

Google Gemini: Create an account and get an API key at Google AI Studio.

xAI Grok: Create an account and get an API key at xAI.

DeepSeek: Create an account and get an API key at DeepSeek.

Configuration File

SploitScan searches for a config.json in multiple locations by default. It will load the first valid file it finds, in this order:

1. Custom path passed via --config or -c
2. En : SPLOITSCAN_CONFIG_PATH
3. Local and standard config-file locations:
- Current working directory
- ~/.sploitscan/config.json
- ~/.config/sploitscan/config.json
- ~/Library/Application Support/sploitscan/config.json (macOS)
- %APPDATA%/sploitscan/config.json (Windows)
- /etc/sploitscan/config.json

> Note: Only one file is loaded — the first one found in the abo. You can place your config.json in any of these paths.

A typical config.json might look like this:

🚀 Usage

Single C

Multiple C

Local C Update

You can now update (or initially clone) the full CVE List V5 repository locally by using the --local option. Note that this repository is several GB in size, so the download may take a while. For example:

Keyword-Based Search Across Sources

Search for CVEs by keywords (e.g., "Apple") across the local database, CISA, and Nuclei Templates.

> [!TIP]
> This can replace more or less replace searchsploit as ExploitDB isn't regularly updated anymore.

Fast Mode

Enable fast mode to only display basic C (skipping additional lookups).

Import from Scanner

Specify the type: 'nessus', 'nexpose', 'openvas', or 'docker' and provide the file path.

Import from Directory

Scan an entire directory recursively for reports and extract CVE IDs from all files.

Select Specific Methods

To run only specific data retrie (e.g., CISA, EPSS, AI risk assessment), use the -m argument:

Export Results

Specify the export format: 'json', 'csv', or 'html'.

Docker

Ensure you ha installed. For installation instructions, see Docker's official installation guide.

To build and run SploitScan in Docker:

With a mounted from the current directory

#### Windows (Powershell)

#### Linux

🤖 AI-Powered Risk Assessment

Select an AI provider for risk assessment (OpenAI ChatGPT, Google Gemini, Grok AI and DeepSeek).

SploitScan integrates with OpenAI to provide a comprehensi risk assessment for each CVE. This feature includes:

Detailed Risk Assessment: Understand the nature of the and its business impact.

Potential Attack Scenarios: Get descriptions of potential attack scenarios le the .

Mitigation Recommendations: Recei, actionable recommendations to mitigate the risk.

Executi: A concise summary accessible to non-technical stakeholders, highlighting the business impact and urgency.

Example output

🛡️ Patching Priority System

The Patching Prioritization System in SploitScan provides a strategic approach to prioritizing security patches based on the se and exploitability of . It's influenced by the model from C, with enhancements for handling publicly a exploits. This system assists users in making informed decisions on which to patch first, considering both their potential impact and the likelihood of exploitation. Thresholds can be changed to your business needs.
Here's how it works:

A+ Priority: Assigned to listed in CISA’s Known Exploited (KE. These represent the highest urgency due to confirmed exploitation in the wild.

A to D Priority: Determined by a combination of CVSS base score and EPSS (Exploit Prediction Scoring System) probability:

- A: C >= 6.0 and EPSS score >= 0.2. High se with a high probability of exploitation.
- B: C >= 6.0 but EPSS score < 0.2. High se but lower probability of exploitation.
- C: C < 6.0 and EPSS score >= 0.2. Lower se but higher probability of exploitation.
- D: C < 6.0 and EPSS score < 0.2. Lower se and lower probability of exploitation.

🚨 Exploit-Based Escalation

If a public exploit is known for a not already rated A+, its priority is escalated by two levels.
For example:

Any C-rated with a public exploit becomes A-rated.

Any D-rated with a public exploit becomes B-rated.

This ensures that with known exploitation potential are addressed with appropriate urgency.

🫱🏼‍🫲🏽 Contributing

Contributions are welcome! Whether it's fixing bugs, adding new features, or improving the documentation, feel free to fork the repository and submit a pull request. You can also report issues or suggest enhancements through the GitHub issue tracker.

Special thanks to:

UjjwalBudha for ideas & code

hexwreaker for ideas & code

Nilsonfsilva for support on Debian packaging.

bcoles for bugfixes.

Javier Álvarez for bugfixes.

Romullo for ideas & suggestions.

da for enhancements (Updated C and PacketStorm addition).

con-f-use for support and fixes with setuptools/PyPi.

Martijn Russchen for his feedback and idea on HackerOne GraphQL.

diwskx for the directory import feature and Docker impro.

Manuel Sommer for improving the patching prioritization calculation as well as adding Dependabot.

📌 Author

Alexander Hagenah

URL

Twitter

LinkedIn

📆 Changelog

For a detailed list of updates, fixes, and new features, check the Changelog.

项目信息

开发语言：Python

Star 数：1422

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。