Method run_scan

modules/exploit/searchsploit.py:100–185

Scan services for known exploits.

(self, target: Target, services: list[dict])

    async def run_scan(self, target: Target, services: list[dict]) -> ScanResult:
        """Scan services for known exploits."""
        result = ScanResult(target=target, module="exploit.searchsploit")

        if not self.searchsploit_available:
            result.errors.append("searchsploit not available")
            result.success = False
            result.complete()
            return result

        all_exploits = []

        for service in services:
            name = service.get("service") or service.get("name", "")
            version = service.get("version", "")

            if not name:
                continue

            self.logger.info(f"Searching exploits for {name} {version}")
            exploits = await self.search_for_service(name, version)

            for exploit in exploits:
                exploit["matched_service"] = f"{name} {version}".strip()
                all_exploits.append(exploit)

        result.raw_data["exploits"] = all_exploits

        if all_exploits:
            # Categorize by type
            remote_exploits = [
                e for e in all_exploits
                if "remote" in e.get("Type", "").lower()
            ]
            local_exploits = [
                e for e in all_exploits
                if "local" in e.get("Type", "").lower()
            ]

            if remote_exploits:
                result.add_finding(
                    title="Remote Exploits Found",
                    description=f"Found {len(remote_exploits)} potential remote exploit(s)",
                    severity=Severity.HIGH,
                    data={
                        "exploits": [
                            {
                                "title": e.get("Title"),
                                "id": e.get("EDB-ID"),
                                "path": e.get("Path"),
                                "service": e.get("matched_service"),
                            }
                            for e in remote_exploits[:10]
                        ]
                    },
                    references=[
                        f"https://www.exploit-db.com/exploits/{e.get('EDB-ID')}"
                        for e in remote_exploits[:5]
                    ],