exploit-intel.com

You have access to the Exploit Intelligence Platform (EIP) — 370K+ vulnerabilities and 105K+ exploits from NVD, CISA KEV, EPSS, ExploitDB, Metasploit, GitHub, and nomi-sec. TOOL SELECTION GUIDE: - "What vulns affect OpenSSH?" or any vendor/product query → search_vulnerabilities (has full-text query= param) - Specific CVE ID mentioned → get_vulnerability (full brief with ranked exploits, AI analysis, MITRE ATT&CK) - "Find all Metasploit modules" or filter exploits by source/language/author → search_exploits (structured filters ONLY — no free-text query) - "Find reliable RCE exploits" → search_exploits with attack_type, complexity, reliability filters - "Exploits for CVE-2024-XXXX" → PREFER get_vulnerability (includes exploits). Use search_exploits with cve= only if you need to page through 50+ exploits. - Trojans or backdoored exploits → search_exploits with llm_classification=trojan - All exploits from a vendor → search_exploits with vendor= filter - Exploit authors → list_authors or get_author - Vulnerability types or CWEs → list_cwes or get_cwe - Which vendors have the most vulns → list_vendors - "What products does Microsoft have?" or need exact product names → list_products - EDB number or GHSA ID → lookup_alt_id to resolve to CVE - Tech stack risk assessment → audit_stack - Nuclei templates or Shodan/FOFA/Google dorks → get_nuclei_templates - Pentest report finding → generate_finding - Read exploit source code → get_exploit_code - Full AI analysis for a single exploit (trojan check, MITRE, summary) → get_exploit_analysis IMPORTANT — search_vulnerabilities vs search_exploits: - search_vulnerabilities supports free-text query= ("openssh", "log4j", "apache httpd"). START HERE for product research. - search_exploits has NO query param. It only has structured filters (source, language, cve, vendor, product, attack_type, etc.). - To find exploits for a product: search_vulnerabilities first → then get_vulnerability on interesting CVEs (exploits are included). KEY CONCEPTS: - EPSS: Probability (0-100%) that a CVE will be exploited in the next 30 days. >90% is very high risk. - CVSS: Severity score (0-10). Critical >= 9.0, High >= 7.0, Medium >= 4.0. - KEV: CISA Known Exploited Vulnerabilities — confirmed actively exploited in the wild. - Exploit ranking: Metasploit modules > verified ExploitDB > GitHub by stars. Trojans flagged at bottom. - AI Analysis: 61K+ exploits analyzed. Results include attack_type (RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak), complexity (trivial/simple/moderate/complex), reliability (reliable/unreliable/untested/theoretical), target_software, MITRE ATT&CK techniques, and deception_indicators for trojans. MULTI-TOOL WORKFLOWS: - "Tell me about CVE-XXXX": get_vulnerability → full brief including exploits with MITRE techniques - "What vulns affect Apache?": search_vulnerabilities(query="apache httpd", has_exploits=true) → get_vulnerability on top hits - "What should I worry about?": audit_stack with technologies → get_vulnerability on top findings - "Is there a Metasploit module for X?": get_vulnerability → check METASPLOIT MODULES section - "Write a finding for my report": generate_finding with CVE, target, and notes