eip-search
The official command-line client for the Exploit Intelligence Platform.
Search vulnerability intelligence, exploit artifacts, readable PoC source, Docker labs, vendors, packages, CWEs, and exploit authors from a terminal or a JSON-aware script. Results preserve the API's source attribution, ordering, identifiers, and opaque pagination cursors.
eip-search is read-only. It does not execute acquired code, build labs, call a
model, rank exploits, or claim that an artifact works, is verified, reliable,
effective, or safe.
Install
Python 3.12 or newer is required. Install the isolated application with
pipx:
pipx install eip-search
eip-search doctor
Upgrade later with pipx upgrade eip-search.
Try it
Search vulnerabilities or open one directly:
eip-search apache
eip-search CVE-2024-3400
eip-search vuln search --vendor Microsoft --product Windows --limit 10
Find and inspect exploit artifacts:
eip-search exploit search CVE-2024-3400 --limit 10
eip-search exploit search --association unlinked --limit 10
eip-search exploit show 8700882207674114
eip-search exploit analysis 8700882207674114
Search readable PoC source and Docker labs:
eip-search code 'subprocess.run(' --limit 10
eip-search code 'jndi ldap' --vulnerability CVE-2021-44228
eip-search lab search CVE-2024 --kind compose --limit 10
Explore the discovery directories:
eip-search package --ecosystem PyPI Django
eip-search cwe show CWE-78
eip-search author list exploitintel --source github --role owner
Add --json to a data command for machine-readable output:
eip-search vuln search apache --limit 10 --json
Run eip-search --help or eip-search COMMAND --help for the complete runtime
reference.
What it covers
- Vulnerabilities, affected products and versions, exploitation context, and accepted research references
- ExploitDB, Metasploit, repository PoCs, files, and stored model analysis
- Private, non-indexable source-code search and protected PoC downloads
- Docker/Compose lab units and stored lab analysis
- Vendors, products, ecosystems, packages, official CWEs, and exploit authors
- Corpus health, statistics, and API-owned STIX 2.1 bundles
Configuration
The CLI connects to https://exploit-intel.com automatically; users do not
need to provide an API URL on any command.
CLI options override environment variables, which override the optional
configuration file at ~/.config/eip-search/config.toml or
$XDG_CONFIG_HOME/eip-search/config.toml.
Safety and trust
- Corpus text and source code are treated as hostile terminal input.
- PoC file and download access uses fresh, short-lived tokens that are never printed or retained.
- Downloads remain password-protected ZIP archives; the CLI never extracts or executes them.
- Stored analysis is attributed model interpretation, not an EIP verdict.
- Missing analysis never means that an artifact was reviewed and found safe.
See the security policy before reporting a vulnerability or sharing diagnostic output.
Documentation
License
1 maintainer
Release files for eip-search 3.0.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| eip_search-3.0.0.tar.gz | 56.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| eip_search-3.0.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size:96.8 kB
Release files / eip_search-3.0.0.tar.gz
| Download URL | eip_search-3.0.0.tar.gz |
|---|---|
| Size | 56.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
3973eb494b8cd3d1df517b5e206e601ca2fb848b18d8bd52e7b124f1964db329
|
|
BLAKE2b-256 checksum How to use checksums |
6ba2bcff298234ed2cd0524cab41536b135a21008407b98fb6c290f7fa777383
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 13, 2026.
Transparency logRelease files / eip_search-3.0.0-py3-none-any.whl
| Download URL | eip_search-3.0.0-py3-none-any.whl |
|---|---|
| Size | 40.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
293d87c290335a67228d499ef50602bf3eef914424020f1d86a08e17fa15d05b
|
|
BLAKE2b-256 checksum How to use checksums |
af9ae2e11ece2a62a486beea708447e184f10394dd9e8e4bef100aa408f40780
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 13, 2026.
Transparency log
