Resources for determining if Metasploit has exploit for given CVE

Question

Are there any reliable resources for finding whether or not a Metasploit exploit exists for a given CVE?

I have found CVE Details to be woefully out of date with regards to keeping this information up to date.

I've found that googling for "metasploit CVE-xxxx-yyy" works pretty well — paj28, Commented Nov 26, 2013 at 16:20
You can use rapid7.com/db/search to search Metasploit modules online. — void_in, Commented Nov 26, 2013 at 17:00
There is also a nice search page in securityfocus.com/vulnerabilities — metavaronos, Commented Nov 20, 2014 at 8:40

Drag0nR3b0rn · Accepted Answer · 2013-11-30 20:32:58Z

The most reliable source, is probably Metasploit's vulnerability & exploits DB - But some alternate sources do exist:

You can use Exploit-DB search to search by CVE exploits by "metasploit" e.g.:

http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=&filter_exploit_text=&filter_author=metasploit&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=[CVE]
You can use OSVDB.org to search by CVE e.g.:

http://osvdb.org/search/search?search[vuln_title]=&search[text_type]=titles&search[s_date]=&search[e_date]=&search[refid]=[CVE]&search[referencetypes]=CVEID&search[vendors]=&search[cvss_score_from]=&search[cvss_score_to]=&search[cvss_av]=*&search[cvss_ac]=*&search[cvss_a]=*&search[cvss_ci]=*&search[cvss_ii]=*&search[cvss_ai]=*&kthx=search

and check the references section for a Metasploit URL.

It's worth noting that both those sources are usually a day or two behind the Metasploit repo.

1 Answer 1