Top 10 Exploit Databases for Finding Vulnerabilities « Null Byte :: WonderHowTo

Hundreds ofWindows 10,macOS, andLinuxvulnerabilities are disclosed every single week, many of which elude mainstream attention. Most users aren't even aware that newly found exploits and vulnerabilities exist, nor that CVEs can be located by anyone in just a few clicks from a selection of websites online.What Is a CVE?The numbered reference system used to catalog disclosed vulnerabilities and exploits is called the Common Vulnerabilities and Exposures (CVE) system.For example, theExploit Databaseuses CVEs to identify individual vulnerabilities which are associated with a particular version of a service like "SSH v7.7," as shown below withCVE-2018-15473. All exploit databases operate and index CVEs similarly or exactly like the CVE number assigned to this particular SSH username enumeration vulnerability.Don't Miss:How to Easily Detect CVEs with Nmap ScriptsCVEs and exploits are highly sought after by black hats and security professionals alike. They can be used tohack into outdated Windows versions,perform privilege escalation, andaccess routerswithout the target's knowledge, among other things.Now that we know what a CVE is, let's see where we can find them.1. CIRCLTheComputer Incident Response Center Luxembourg (CIRCL)is an information security organization designed to handle cyber threat detections and incidents. Its website featuressecurity research publicationsand asearchable CVE database.2. VulDBFor decades, theVulDBspecialists have coordinated with large and independent information security communities to compile asearchable databaseof over 124,000 CVEs. Hundreds of new entries are added on a daily basis and scored (e.g., low, medium, high) based on the severity of the disclosed exploit.3. SecurityFocusSecurityFocus hasreported on cybersecurity incidentsandpublished whitepapersin the past. These days, ittracks software bug reportsand has beencompiling a searchable archive of CVEssince 1999.Don't Miss:How to Find Almost Every Known Vulnerability & Exploit Out There4. 0day.today0day.today(accessible viator onion service), is an exploit database that also sellsprivate exploits for as much as $5,000 USD. While there areseveralreportsof scams occurring with private sales, thesearchable public databaseis quite legitimate.Don't Miss:The Top 80+ Websites Available in the Tor Network5. Rapid7Rapid7, creators of theMetasploit Framework, have asearchable CVE databaseon its website. However, unlike other databases, Rapid7 very rarely features the actual exploit code. Instead, it offers advisories containing helpful reference links to relevant documentation for remediation, as well as links to msfconsole modules that automate the indexed exploit.For example, since the public disclosure ofCVE-2018-15473, the aforementioned SSH username enumeration exploit, the hackcan be found in msfconsoleand executed with great ease.6. NISTTheNational Institute of Standards and Technology (NIST)is one of the oldest physical science laboratories in the United States. It's currently involved in a myriad of technologies and research such as itsnational initiative for cybersecurity education,CVE archive,cutting-edge technology news, andquantum information science program. Anyone can searchits CVE database.7. Packet Storm SecurityPacket Storm Securityisn't exactly intended to be a searchable database of exploits. Rather, it's a general resource of information pertaining tovulnerability advisoriesand remediations. The Packet Storm website also featureshacker news,research whitepapers, and afeed of recently disclosed CVEs.8. Exploit DatabaseThe Exploit Database is currently maintained by theOffensive Securityorganization which specializes inadvanced Windows exploitation,web application security, andvarious prominent penetration tester certificationtraining.Itssearchable databasecurrently features a collection of over 40,000remote,local,web application, anddenial-of-serviceexploits, as well as aGoogle hacking database,research whitepapers, and adatabase search function.Don't Miss:How to Find Exploits Using the Exploit Database in Kali9. VulnersVulners, founded byKir Ermakov, is a CVE database currently containing over 176,500 indexed exploits. Its website includesCVE statistics,a Linux vulnerability management auditor, andsearchable CVE database.Don't Miss:How to Scan Websites for Potential Vulnerabilities10. MITREMITREis a US government-sponsored organization that manages federally funded research and development centers (FFRDC). Its website emphasizescommercial publicationsand information related to their FFRDCs such as theNational Cybersecurity program. It also maintains one ofthe biggest and widely referenced CVE databasescurrently available,searchableby the public.Operating System Advisory & CVE Databases (Bonus)Some readers may be looking to explore recent OS-specific vulnerabilities — or simply trying to remain aware to better protect themselves. Most operating system distributions offer an advisory listing on their website. These are mostly application-specific vulnerabilities and bugs, but in many cases, can be easily exploited by attackers.Microsoft:Windows Security Update GuideAndroid:Monthly Security BulletinApple:Security UpdatesUbuntu:Security Notices,CVE Tracker,Mailing ListDebian:Recent Advisories,Mailing ListRedHat:CVE Database,Security AdvisoriesArch Linux:Security AdvisoriesI hope you enjoyed this article. If we missed any noteworthy websites or databases you find vital to a penetration testers arsenal, be sure to leave a comment and share your picks.Don't Miss:The Ultimate Guide to Hacking macOSFollow Null Byte onTwitter,Flipboard, andYouTubeSign up forNull Byte's weekly newsletterFollow WonderHowTo onFacebook,Twitter,Pinterest, andFlipboardWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover photo and screenshots by distortion/Null ByteRelatedHack Like a Pro:How to Find Almost Every Known Vulnerability & Exploit Out ThereHack Like a Pro:How to Find  Exploits Using the Exploit Database in KaliHack Like a Pro:How to Find the Latest Exploits and Vulnerabilities—Directly from MicrosoftHack Like a Pro:How to Exploit and Gain Remote Access to PCs Running Windows XPHow To:Easily Detect CVEs with Nmap ScriptsHack Like a Pro:Using Nexpose to Scan for Network & System VulnerabilitiesHack Like a Pro:How to Exploit Adobe Flash with a Corrupted Movie File to Hack Windows 7How To:Use NMAP 7 to Discover Vulnerabilities, Launch DoS Attacks and More!Hack Like a Pro:How to Find Website Vulnerabilities Using WiktoHow To:The Art of 0-Day Vulnerabilities, Part3: Command Injection and CSRF VulnerabilitiesHack Like a Pro:Hacking Windows XP Through Windows 8 Using Adobe Flash PlayerHack Like a Pro:How to Scan for Vulnerabilities with NessusNews:How to Study for the White Hat Hacker Associate Certification (CWA)How To:Identify Missing Windows Patches for Easier ExploitationHow to Hack Databases:Hunting for Microsoft's SQL ServerHow To:The Art of 0-Day Vulnerabilities, Part2: Manually FuzzingThe Panama Papers Hack:Further Proof That Hacking Is Changing the WorldHack Like a Pro:How to Hack Windows Vista, 7, & 8 with the New Media Center ExploitHow to Hack Like a Pro:Getting Started with MetasploitHack Like a Pro:How to Hack Web Apps, Part 5 (Finding Vulnerable WordPress Websites)How To:Scan for Vulnerabilities on Any Website Using NiktoHow To:Set Up a Pentesting Lab Using XAMPP to Practice Hacking Common Web ApplicationsHow To:Use Dorkbot for Automated Vulnerability DiscoveryNews:Hack the Switch? Nintendo's Ready to Reward You Up to $20,000How To:Exploit EternalBlue on Windows Server with MetasploitHack Like a Pro:Using the Nmap Scripting Engine (NSE) for ReconnaissanceNews:Intel Core 2 Duo Remote Exec Exploit in JavaScriptIPsec Tools of the Trade:Don't Bring a Knife to a GunfightNews:Flaw in Facebook & Google Allows Phishing, Spam & MoreHack Logs and Linux Commands:What's Going On Here?How To:Spider Web Pages with Nmap for SQLi VulnerabilitiesHow To:Is Your Website Vulnerable to XSS Injections? Here's How to Protect Your VisitorsHow To:Protect Your PHP Website from SQL Injection HacksForbes Exploited:XSS Vulnerabilities Allow Phishers to Hijack Sessions & Steal Logins