Vulnerability Search

Search for CVEs or technologies to quickly identify any existing vulnerabilities in software. This tool can be used to quickly determine if a software has known vulnerabilities.

Input Input a specific technology name or CVE ID.

Operation We'll initiate a comprehensive search across our databases for associated vulnerabilities. This tool is passive, no requests will be made to the target.

Result You'll receive a detailed table showcasing relevant vulnerabilities, complete with proof-of-concept code for each.

API Overview | 1,000 free daily requests

Make a HTTP POST request (content-type application/json) to https://srcport.com/api/free/[module]

POST

Add a Authorization: Bearer [token] header to the request including your personal API token viewable in your account profile.

Header

The HTTP POST request payload should contain a JSON formatted prompt and options field. The prompt field is typically the target of the scan, e.g., 'example.com'. The buttons below can be used to view the available options.

The prompt is the main searchterm provided to the tool. This needs to be in a format required by the tool otherwise an error may be returned. For example some tools may require URLs while others may require IP addresses.

Some options may be required while others are optional. If there are no options, an empty object should be provided.

The default API key is provided as an example only. This will not work in your own applications. Register for a free account to get an API key.

Example CURL Request

Vulnerability Search

The Vulnerability Search tool performs checks against SearchSploit, enabling users to quickly identify potential vulnerabilities and security issues.

Low Risk Vulnerability Search

CVE

Common Vulnerabilities and Exposures - A standardized method for identifying and naming security vulnerabilities in software and hardware.

CVSS

Common Vulnerability Scoring System - A framework for rating the severity of security vulnerabilities in software and hardware.

CWE

Common Weakness Enumeration - A community-developed list of software and hardware weaknesses.

NVD

National Vulnerability Database - A US government repository of standards-based vulnerability management data.

OSVDB

Open Sourced Vulnerability Database - A community-driven, open-source database of software vulnerabilities.