sploitscan
A tool to fetch and display vulnerability information and public exploits for given CVE IDs.
root@kali:~# sploitscan -h
███████╗██████╗ ██╗ ██████╗ ██╗████████╗███████╗ ██████╗ █████╗ ███╗ ██╗
██╔════╝██╔══██╗██║ ██╔═══██╗██║╚══██╔══╝██╔════╝██╔════╝██╔══██╗████╗ ██║
███████╗██████╔╝██║ ██║ ██║██║ ██║ ███████╗██║ ███████║██╔██╗ ██║
╚════██║██╔═══╝ ██║ ██║ ██║██║ ██║ ╚════██║██║ ██╔══██║██║╚██╗██║
███████║██║ ███████╗╚██████╔╝██║ ██║ ███████║╚██████╗██║ ██║██║ ╚████║
╚══════╝╚═╝ ╚══════╝ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝
v0.14.3 / Alexander Hagenah / @xaitax / ah@primepage.de
usage: sploitscan [-h] [-e {json,csv,html}]
[-t {nessus,nexpose,openvas,docker}]
[--ai {openai,google,grok,deepseek}]
[-k KEYWORDS [KEYWORDS ...]] [-local] [-f] [-m METHODS]
[-i IMPORT_FILE] [--input-dir INPUT_DIR] [-c CONFIG] [-d]
[cve_ids ...]
SploitScan: Retrieve and display vulnerability and exploit data for specified
CVE ID(s).
positional arguments:
cve_ids Enter one or more CVE IDs (e.g., CVE-YYYY-NNNNN). This
is optional if an import file is provided via -i.
options:
-h, --help show this help message and exit
-e, --export {json,csv,html}
Export the results in the specified format ('json',
'csv', or 'html').
-t, --type {nessus,nexpose,openvas,docker}
Specify the type of the import file ('nessus',
'nexpose', 'openvas', or 'docker').
--ai {openai,google,grok,deepseek}
Select the AI provider for risk assessment (e.g.,
'openai', 'google', 'grok', or 'deepseek').
-k, --keywords KEYWORDS [KEYWORDS ...]
Search for CVEs related to specific keywords (e.g.,
product name).
-local, --local-database
Download the cvelistV5 repository into the local
directory. Use the local database over online research
if available.
-f, --fast-mode Enable fast mode: only display basic CVE information
without fetching additional exploits or data.
-m, --methods METHODS
Specify which methods to run, separated by commas
(e.g., 'cisa,epss,hackerone,ai,prio,references').
-i, --import-file IMPORT_FILE
Path to an import file. When provided, positional CVE
IDs can be omitted. The file should be a plain text
list with one CVE per line.
--input-dir INPUT_DIR
Path to a directory containing vulnerability reports
to scan for CVE IDs.
-c, --config CONFIG Path to a custom configuration file.
-d, --debug Enable debug output.