Resources for determining if Metasploit has exploit for given CVE

Question

Are there any reliable resources for finding whether or not a Metasploit exploit exists for a given CVE?

I have found CVE Details to be woefully out of date with regards to keeping this information up to date.

I've found that googling for "metasploit CVE-xxxx-yyy" works pretty well — paj28, Nov 26 '13 at 16:20
You can use http://www.rapid7.com/db/search to search Metasploit modules online. — void_in, Nov 26 '13 at 17:00
There is also a nice search page in http://www.securityfocus.com/vulnerabilities — metavaronos, Nov 20 '14 at 08:40

score 6 · Accepted Answer · answered Nov 30 '13 at 20:32

The most reliable source, is probably Metasploit's vulnerability & exploits DB - But some alternate sources do exist:

You can use Exploit-DB search to search by CVE exploits by "metasploit" e.g.:

http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=&filter_exploit_text=&filter_author=metasploit&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=[CVE]
You can use OSVDB.org to search by CVE e.g.:

http://osvdb.org/search/search?search[vuln_title]=&search[text_type]=titles&search[s_date]=&search[e_date]=&search[refid]=[CVE]&search[referencetypes]=CVEID&search[vendors]=&search[cvss_score_from]=&search[cvss_score_to]=&search[cvss_av]=*&search[cvss_ac]=*&search[cvss_a]=*&search[cvss_ci]=*&search[cvss_ii]=*&search[cvss_ai]=*&kthx=search

and check the references section for a Metasploit URL.

It's worth noting that both those sources are usually a day or two behind the Metasploit repo.

1 Answers1