Search
search by name, CVE, type — filter modules before any use on $LAB.
Visual · msf_search
search cve: name: type: Original Cyberlium.
search is the catalog — not a shopping list for the internet.
`search eternal` finds names; `search cve:2017-0144` finds CVE tags; `search type:auxiliary name:ftp` combines filters. Results rank by relevance — read before use. Search history belongs in lab notes, not public forums with your stray targets. Next: Info Docs.
1. Search syntax
Keywords, `type:`, `platform:`, `cve:`, `name:` — combine to narrow. Tab completion helps module paths.
Save useful queries for YOUR lab services on $LAB — not for random Shodan hosts.
Command guide
Try these commands — Search syntax
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Search modules — https://docs.rapid7.com/metasploit/using-metasploit/#search Exploit-DB — https://www.exploit-db.com/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
═══ LINUX / macOS ═══
Command — copy this
msfconsole -q -x 'search type:exploit platform:linux; exit' 2>/dev/null || echo 'Search literacy — do not run against strangers'
Primary tools to practice this lesson: msfconsole. Reference sites: Search modules (https://docs.rapid7.com/metasploit/using-metasploit/#search); Exploit-DB (https://www.exploit-db.com/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Rank and disclosure
Results show rank and disclosure dates — older modules may not match patched $LAB snapshots.
Defenders search the same catalog to write detection content.
3. Ethics
Finding a module for a CVE does not authorize firing it at neighbors. RoE first, search second, info third, use last — on $LAB only.
4. What you ship: three search queries saved
Three search lines + result counts. No use/run. chmod 600.
5. What you record before the next lesson
Date. Queries. File t14-m04-l01-search.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: search then immediately run top result on public IP.
- Right: Practice search syntax. Next: Info Docs.
Mission: run three searches
1) msfconsole -q 2) Run three different search filters. 3) Record counts/paths chmod 600. 4) exit — no use/run.
Stuck? Ask Cyberlium AI Mentor
search is fast; RoE is the brake.
APPLY: search cve:2017-0144 finds:
APPLY: True or False: Search results authorize using modules on any host.
APPLY: Combining type: and name: helps: