exploit-eye.py

#!/usr/bin/env/python3
# This Python file uses the following -*- coding: utf-8 -*-

# ===== #
#   
# ▀█████████▄     ▄████████         Websites: HackingPassion.com | Bullseye0.com
#   ███    ███   ███    ███         Author: Jolanda de Koff | Bulls Eye
#   ███    ███   ███    █▀          GitHub: https://github.com/BullsEye0
#  ▄███▄▄▄██▀   ▄███▄▄▄             linkedin: https://www.linkedin.com/in/jolandadekoff
# ▀▀███▀▀▀██▄  ▀▀███▀▀▀             Facebook Page: https://www.facebook.com/ethical.hack.group/
#   ███    ██▄   ███    █▄          Facebook: https://www.facebook.com/profile.php?id=100069546190609
#   ███    ███   ███    ███         Twitter: https://twitter.com/bulls__eye
# ▄█████████▀    ██████████         YouTube: https://www.youtube.com/@HackingPassion
#                                   
#          Bulls Eye..!
# ===== #

# Exploit Eye V1.0 Created years ago for private use.
# Copyright (c) 2025 Jolanda de Koff.

########################################################################

# A notice to all nerds and n00bs...
# If you will copy the developer's work it will not make you a hacker..!
# Respect all developers, we doing this because it's fun...

########################################################################

# Copyright (c) 2025 Jolanda de Koff (BullsEye0)
# Licensed under Custom Restrictive License
# See LICENSE file for details
# Unauthorized integration or redistribution is prohibited

#########################################################################

import requests
import json
import time
import sys
from datetime import datetime, timedelta


def banner():
    print("""
    \033[1;31m
▓█████ ▒██   ██▒ ██▓███   ██▓     ▒█████   ██▓▄▄▄█████▓   ▓█████▓██   ██▓▓█████ 
▓█   ▀ ▒▒ █ █ ▒░▓██░  ██▒▓██▒    ▒██▒  ██▒▓██▒▓  ██▒ ▓▒   ▓█   ▀ ▒██  ██▒▓█   ▀ 
▒███   ░░  █   ░▓██░ ██▓▒▒██░    ▒██░  ██▒▒██▒▒ ▓██░ ▒░   ▒███    ▒██ ██░▒███   
▒▓█  ▄  ░ █ █ ▒ ▒██▄█▓▒ ▒▒██░    ▒██   ██░░██░░ ▓██▓ ░    ▒▓█  ▄  ░ ▐██▓░▒▓█  ▄ 
░▒████▒▒██▒ ▒██▒▒██▒ ░  ░░██████▒░ ████▓▒░░██░  ▒██▒ ░    ░▒████▒ ░ ██▒▓░░▒████▒
░░ ▒░ ░▒▒ ░ ░▓ ░▒▓▒░ ░  ░░ ▒░▓  ░░ ▒░▒░▒░ ░▓    ▒ ░░      ░░ ▒░ ░  ██▒▒▒ ░░ ▒░ ░
 ░ ░  ░░░   ░▒ ░░▒ ░     ░ ░ ▒  ░  ░ ▒ ▒░  ▒ ░    ░        ░ ░  ░▓██ ░▒░  ░ ░  ░
   ░    ░    ░  ░░         ░ ░   ░ ░ ░ ▒   ▒ ░  ░            ░   ▒ ▒ ░░     ░   
   ░  ░ ░    ░               ░  ░    ░ ░   ░                 ░  ░░ ░        ░  ░
                                                                 ░ ░            
    \033[1;m
                        Exploit Eye V1.0
                        
                    Author: Jolanda de Koff aka Bulls Eye
                    GitHub: https://github.com/BullsEye0
                    Website: https://HackingPassion.com
                    
                    \033[1;31mLet's find some vulnerabilities! 🎯\033[0m
    """)


def menu():
    print("\n\033[1;34m" + "="*70 + "\033[1;m")
    print("\033[1;34m[1]\033[1;m Latest Critical CVEs (Last 7 days)")
    print("\033[1;34m[2]\033[1;m Search CVEs by Keyword")
    print("\033[1;34m[3]\033[1;m Search CVEs by Vendor/Product")
    print("\033[1;34m[4]\033[1;m Get Specific CVE Details")
    print("\033[1;34m[5]\033[1;m Search Exploit-DB")
    print("\033[1;34m[6]\033[1;m Search GitHub for Tools/Exploits")
    print("\033[1;34m[0]\033[1;m Exit")
    print("\033[1;34m" + "="*70 + "\033[1;m")


def get_latest_cves(days=7, min_score=7.0):
    print(f"\n[*] Fetching CVEs from last {days} days (CVSS >= {min_score})...")
    print("[*] Using NIST NVD API...")
    
    try:
        end_date = datetime.now()
        start_date = end_date - timedelta(days=days)
        
        pub_start = start_date.strftime("%Y-%m-%dT00:00:00.000")
        pub_end = end_date.strftime("%Y-%m-%dT23:59:59.999")
        
        url = "https://services.nvd.nist.gov/rest/json/cves/2.0"
        
        params = {
            "pubStartDate": pub_start,
            "pubEndDate": pub_end,
            "cvssV3Severity": "CRITICAL",
        }
        
        headers = {
            "User-Agent": "Exploit Eye/1.0 (https://hackingpassion.com)"
        }
        
        response = requests.get(url, params=params, headers=headers, timeout=30)
        
        if response.status_code == 200:
            data = response.json()
            
            if "vulnerabilities" not in data or len(data["vulnerabilities"]) == 0:
                print("[!] No critical CVEs found in the last 7 days")
                return
            
            print(f"\n[✓] Found {len(data['vulnerabilities'])} critical CVEs!\n")
            
            counter = 1
            for vuln_wrapper in data["vulnerabilities"]:
                vuln = vuln_wrapper.get("cve", {})
                
                cve_id = vuln.get("id", "N/A")
                
                descriptions = vuln.get("descriptions", [])
                description = "N/A"
                for desc in descriptions:
                    if desc.get("lang") == "en":
                        description = desc.get("value", "N/A")
                        break
                
                metrics = vuln.get("metrics", {})
                cvss_score = "N/A"
                cvss_severity = "N/A"
                
                if "cvssMetricV31" in metrics and len(metrics["cvssMetricV31"]) > 0:
                    cvss_data = metrics["cvssMetricV31"][0].get("cvssData", {})
                    cvss_score = cvss_data.get("baseScore", "N/A")
                    cvss_severity = cvss_data.get("baseSeverity", "N/A")
                
                published = vuln.get("published", "N/A")
                
                print("*" * 70)
                print(f"\n[{counter}] {cve_id}")
                print(f"[+] CVSS: {cvss_score} ({cvss_severity})")
                print(f"[+] Published: {published[:10]}")
                print(f"[+] Description: {description[:200]}...")
                print(f"[+] Details: https://nvd.nist.gov/vuln/detail/{cve_id}")
                print()
                
                counter += 1
                time.sleep(0.1)
            
            print("*" * 70)
            
        elif response.status_code == 403:
            print("[!] NVD API blocked the request (rate limit or IP ban)")
            print("[!] Try again in a few minutes")
        else:
            print(f"[!] API Error: {response.status_code}")
            
    except Exception as e:
        print(f"[!] Error: {e}")


def search_cve_keyword(keyword, max_results=20):
    print(f"\n[*] Searching NVD for: {keyword}")
    print(f"[*] Max results: {max_results}")
    
    try:
        url = "https://services.nvd.nist.gov/rest/json/cves/2.0"
        
        params = {
            "keywordSearch": keyword,
            "resultsPerPage": max_results,
        }
        
        headers = {
            "User-Agent": "Exploit Eye/1.0 (https://hackingpassion.com)"
        }
        
        response = requests.get(url, params=params, headers=headers, timeout=30)
        
        if response.status_code == 200:
            data = response.json()
            
            if "vulnerabilities" not in data or len(data["vulnerabilities"]) == 0:
                print(f"[!] No CVEs found for keyword: {keyword}")
                return
            
            total = data.get("totalResults", 0)
            print(f"\n[✓] Found {len(data['vulnerabilities'])} results (Total: {total})\n")
            
            counter = 1
            for vuln_wrapper in data["vulnerabilities"]:
                vuln = vuln_wrapper.get("cve", {})
                
                cve_id = vuln.get("id", "N/A")
                
                descriptions = vuln.get("descriptions", [])
                description = "N/A"
                for desc in descriptions:
                    if desc.get("lang") == "en":
                        description = desc.get("value", "N/A")
                        break
                
                metrics = vuln.get("metrics", {})
                cvss_score = "N/A"
                cvss_severity = "N/A"
                
                if "cvssMetricV31" in metrics and len(metrics["cvssMetricV31"]) > 0:
                    cvss_data = metrics["cvssMetricV31"][0].get("cvssData", {})
                    cvss_score = cvss_data.get("baseScore", "N/A")
                    cvss_severity = cvss_data.get("baseSeverity", "N/A")
                elif "cvssMetricV2" in metrics and len(metrics["cvssMetricV2"]) > 0:
                    cvss_data = metrics["cvssMetricV2"][0].get("cvssData", {})
                    cvss_score = cvss_data.get("baseScore", "N/A")
                
                published = vuln.get("published", "N/A")
                
                print("*" * 70)
                print(f"\n[{counter}] {cve_id}")
                print(f"[+] CVSS: {cvss_score} ({cvss_severity})")
                print(f"[+] Published: {published[:10]}")
                print(f"[+] Description: {description[:300]}...")
                print(f"[+] NVD: https://nvd.nist.gov/vuln/detail/{cve_id}")
                print(f"[+] Exploit-DB: https://www.exploit-db.com/search?cve={cve_id}")
                print()
                
                counter += 1
                time.sleep(0.1)
            
            print("*" * 70)
            
        else:
            print(f"[!] API Error: {response.status_code}")
            
    except Exception as e:
        print(f"[!] Error: {e}")


def search_exploitdb(keyword, max_results=20):
    print(f"\n[*] Searching Exploit-DB for: {keyword}")
    
    try:
        url = "https://www.exploit-db.com/search"
        
        params = {
            "q": keyword
        }
        
        headers = {
            "User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
        }
        
        response = requests.get(url, params=params, headers=headers, timeout=30)
        
        if response.status_code == 200:
            print("[✓] Search successful!")
            print(f"[+] Results URL: {response.url}")
            print("\n[!] Note: For full Exploit-DB results, use searchsploit on command line:")
            print(f"    searchsploit {keyword}")
        else:
            print(f"[!] Exploit-DB returned status code: {response.status_code}")
            
    except Exception as e:
        print(f"[!] Error: {e}")


def search_github(keyword, max_results=20):
    print(f"\n[*] Searching GitHub for: {keyword}")
    print(f"[*] Max results: {max_results}")
    
    try:
        url = "https://api.github.com/search/repositories"
        
        params = {
            "q": f"{keyword} exploit OR poc OR vulnerability",
            "sort": "stars",
            "order": "desc",
            "per_page": max_results
        }
        
        headers = {
            "Accept": "application/vnd.github.v3+json",
            "User-Agent": "Exploit Eye/1.0 (https://hackingpassion.com)"
        }
        
        response = requests.get(url, params=params, headers=headers, timeout=30)
        
        if response.status_code == 200:
            data = response.json()
            
            if "items" not in data or len(data["items"]) == 0:
                print(f"[!] No GitHub repos found for: {keyword}")
                return
            
            total = data.get("total_count", 0)
            print(f"\n[✓] Found {len(data['items'])} results (Total: {total})\n")
            
            counter = 1
            for repo in data["items"]:
                print("*" * 70)
                print(f"\n[{counter}] {repo.get('full_name', 'N/A')}")
                print(f"[+] Stars: ⭐ {repo.get('stargazers_count', 0)}")
                print(f"[+] Language: {repo.get('language', 'N/A')}")
                print(f"[+] Description: {repo.get('description', 'No description')[:150]}...")
                print(f"[+] URL: {repo.get('html_url', 'N/A')}")
                print(f"[+] Updated: {repo.get('updated_at', 'N/A')[:10]}")
                print()
                
                counter += 1
                time.sleep(0.1)
            
            print("*" * 70)
            print(f"\n[!] GitHub Search: https://github.com/search?q={keyword}+exploit")
            
        elif response.status_code == 403:
            print("[!] GitHub API rate limit exceeded")
            print("[!] Try again in a few minutes or use GitHub token")
        else:
            print(f"[!] GitHub API Error: {response.status_code}")
            
    except Exception as e:
        print(f"[!] Error: {e}")


def get_cve_details(cve_id):
    print(f"\n[*] Fetching details for: {cve_id}")
    
    try:
        url = f"https://services.nvd.nist.gov/rest/json/cves/2.0"
        
        params = {
            "cveId": cve_id
        }
        
        headers = {
            "User-Agent": "Exploit Eye/1.0 (https://hackingpassion.com)"
        }
        
        response = requests.get(url, params=params, headers=headers, timeout=30)
        
        if response.status_code == 200:
            data = response.json()
            
            if "vulnerabilities" not in data or len(data["vulnerabilities"]) == 0:
                print(f"[!] CVE not found: {cve_id}")
                return
            
            vuln = data["vulnerabilities"][0].get("cve", {})
            
            descriptions = vuln.get("descriptions", [])
            description = "N/A"
            for desc in descriptions:
                if desc.get("lang") == "en":
                    description = desc.get("value", "N/A")
                    break
            
            metrics = vuln.get("metrics", {})
            
            print("\n" + "="*70)
            print(f"[*] CVE ID: {cve_id}")
            print("="*70)
            
            if "cvssMetricV31" in metrics and len(metrics["cvssMetricV31"]) > 0:
                cvss = metrics["cvssMetricV31"][0].get("cvssData", {})
                print(f"\n[+] CVSS v3.1 Score: {cvss.get('baseScore', 'N/A')}")
                print(f"[+] Severity: {cvss.get('baseSeverity', 'N/A')}")
                print(f"[+] Vector: {cvss.get('vectorString', 'N/A')}")
            
            print(f"\n[+] Published: {vuln.get('published', 'N/A')}")
            print(f"[+] Last Modified: {vuln.get('lastModified', 'N/A')}")
            
            print(f"\n[+] Description:")
            print(f"    {description}")
            
            refs = vuln.get("references", [])
            if refs:
                print(f"\n[+] References:")
                for ref in refs[:5]:
                    print(f"    - {ref.get('url', 'N/A')}")
            
            print(f"\n[+] More Info:")
            print(f"    - NVD: https://nvd.nist.gov/vuln/detail/{cve_id}")
            print(f"    - Exploit-DB: https://www.exploit-db.com/search?cve={cve_id}")
            print(f"    - GitHub POCs: https://github.com/search?q={cve_id}&type=repositories")
            
            print("="*70)
            
        else:
            print(f"[!] API Error: {response.status_code}")
            
    except Exception as e:
        print(f"[!] Error: {e}")


def main():
    banner()
    
    while True:
        try:
            menu()
            choice = input("\n\033[1;34m[+]\033[1;m Enter choice: ").strip()
            
            if choice == "1":
                get_latest_cves(days=7, min_score=7.0)
                
            elif choice == "2":
                keyword = input("\n[+] Enter keyword: ").strip()
                if keyword:
                    max_results = input("[+] Max results (default 20): ").strip()
                    max_results = int(max_results) if max_results else 20
                    search_cve_keyword(keyword, max_results)
                    
            elif choice == "3":
                vendor = input("\n[+] Enter vendor/product name: ").strip()
                if vendor:
                    max_results = input("[+] Max results (default 20): ").strip()
                    max_results = int(max_results) if max_results else 20
                    search_cve_keyword(vendor, max_results)
                    
            elif choice == "4":
                cve_id = input("\n[+] Enter CVE ID (e.g., CVE-2025-1234): ").strip().upper()
                if cve_id:
                    get_cve_details(cve_id)
                    
            elif choice == "5":
                keyword = input("\n[+] Search Exploit-DB for: ").strip()
                if keyword:
                    search_exploitdb(keyword)
                    
            elif choice == "6":
                keyword = input("\n[+] Search GitHub for: ").strip()
                if keyword:
                    max_results = input("[+] Max results (default 20): ").strip()
                    max_results = int(max_results) if max_results else 20
                    search_github(keyword, max_results)
                    
            elif choice == "0":
                print("\n\033[1;34m[*] Like to See Ya Hacking! 🎯\033[1;m\n")
                sys.exit(0)
                
            else:
                print("\n\033[1;31m[-] Invalid choice!\033[1;m")
                
        except KeyboardInterrupt:
            print("\n\n\033[1;34m[*] Like to See Ya Hacking! 🎯\033[1;m\n")
            sys.exit(0)
        except ValueError:
            print("\n\033[1;31m[-] Invalid input!\033[1;m")
        except Exception as e:
            print(f"\n\033[1;31m[!] Error: {e}\033[1;m")


if __name__ == "__main__":
    main()