ExploitHawk is a powerful terminal-based exploit search tool for ethical hacking and red team operations, designed for Linux distributions(Debian,Rhel,Arch). It searches local databases and directories for fast and accurate results. Tested on Kali Linux.
-
Name and Version Search: Supports searching by name and version separated with
^(e.g.,apache^2.4.51). -
Fast Multi-threaded Search: Scans CSV files and directories concurrently for efficient results.
-
Scrollable Terminal Output: ncurses-based interface with wrapped titles and paths for readability.
-
Linux(Debian,Rhel,Arch)Optimized: Works seamlessly on Debian,Rhel, Arch, Ubuntu, Kali, Parrot, BlackArch,Fedora and other linux distributions.
-
Copy Path to Clipboard: Press
Enterorcto copy the selected result’s path to the system clipboard. The currently selected row is highlighted (white) for easy identification.-
Supports
xclip,xsel, andwl-copy. -
If no clipboard helper is installed, the path is printed on screen and temporarily saved in
/tmp/exploit_copy_XXXXXX.
-
-
Wrap-aware Scrolling & Selection: Handles multi-line (wrapped) results correctly so the entire row stays visible when navigating.
-
Highlight Selected Row: Highlights the currently selected result (entire logical row) for better readability.
ExploitHawk is a local exploit search tool designed for ethical hacking and red team operations, as well as learning about cybersecurity and ethical hacking. It helps users search for exploits safely on their own systems. Using ExploitHawk to find exploits and hack systems without explicit permission is strictly prohibited. This tool does not exploit systems by itself, and the developer is not responsible for any misuse. Only use this tool on systems you own or have explicit permission to test.
ExploitHawk requires a local copy of Exploit-DB to return results.
Copy the following command, paste it into your terminal, and press Enter to verify an Exploit-DB data directory exists on your system:
for p in /usr/share/exploitdb /usr/local/share/exploitdb /var/lib/exploitdb /opt/exploitdb; do [ -d "$p" ] && echo "$p"; doneIf the command prints nothing, no Exploit-DB data directory was found — clone the official Exploit-DB repo to /opt with:
sudo git clone https://gitlab.com/exploit-database/exploitdb.git /opt/exploitdb && chmod -R o+rX /opt/exploitdbOr install it with your package manager (examples):
# Debian / Ubuntu / Kali / Parrot
sudo apt update && sudo apt install -y exploitdb
# Fedora / RHEL
sudo dnf install -y exploitdb
# Arch / BlackArch
sudo pacman -Sy exploitdbExploitHawk will also scan Metasploit module directories (exploits, auxiliary, post, payloads) if they exist. This is optional — ExploitHawk works without Metasploit, but enabling it can surface more matches.
Quick check — Copy the following command, paste it into your terminal, and press Enter:
for p in /usr/share/metasploit-framework/modules /usr/local/share/metasploit-framework/modules /opt/metasploit-framework/modules /var/lib/metasploit-framework/modules; do [ -d "$p" ] && echo "$p"; doneIf the command prints nothing, no Metasploit module directory was found. you can install Metasploit using your distribution's package manager (examples):
# Debian / Ubuntu / Parrot / Kali
sudo apt update
sudo apt install metasploit-framework
# Fedora / RHEL
sudo dnf install metasploit
# Arch / BlackArch
sudo pacman -Sy metasploit- Clone the repository:
git clone https://github.com/s-r-e-e-r-a-j/ExploitHawk.git- Navigate to the project directory:
cd ExploitHawk- Clipboard Helper Installation:
The clipboard copy feature requires one of the following tools to be installed on your system:
-
xclip -
xsel -
wl-copy(for Wayland environments)
Install one using your distribution’s package manager:
# Debian / Ubuntu / Kali / Parrot
sudo apt install xclip -y
# Fedora / RHEL
sudo dnf install xclip -y
# Arch / BlackArch
sudo pacman -Sy xclipIf none of these tools are installed, the tool will still work — it will show the path on the console and save it temporarily in /tmp/.
- Run the installer to install dependencies for compilation and setup the system-wide command:
sudo bash install.shThe installer will check for required dependencies and install them if missing.
# search with name
exploithawk "search_term"# search with name and version
exploithawk "search_term^version"- Example:
exploithawk apacheexploithawk apache^2.4.51-
Use the Up/Down arrow keys to scroll and select results in the terminal interface.
-
Press q to quit the interface.
sudo bash uninstall.shThis will remove the exploithawk command from your system.
This project is licensed under the GNU General Public License v3.0