Exploit DB

capture

The only capture we hold is a challenge page, not the service. It is kept for evidence but is not shown here as if it were the site. View the raw capture.

what the page says

Exploit Database - Exploits for Penetration Testers, Researchers, and Ethical Hackers

The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.

This website uses cookies We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our cookies if you continue to use our website. Show details Allow all cookies Use necessary cookies only EXPLOIT DATABASE EXPLOITS GHDB PAPERS SHELLCODES SEARCH EDB SEARCHSPLOIT MANUAL SUBMISSIONS ONLINE…

reachability history

The 5 most recent checks.
When	Status	HTTP	Response	Bytes	Via
3m ago	Alive	200	31 ms	173,882	chrome-stealth
1h ago	Alive	200	23 ms	173,882	chrome-stealth
2h ago	Alive	200	24 ms	173,882	chrome-stealth
4h ago	Alive	200	24 ms	173,882	chrome-stealth
6h ago	Alive	200	29 ms	173,882	chrome-stealth

security headers

Hsts

Max age: 63072000
Include subdomains: yes
Preload: yes

X frame options

DENY

X content type options

nosniff

Referrer policy

same-origin

Cross origin

X xss protection

1; mode=block

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Score

55

Missing

csppermissions_policycoopcoepcorp

tls certificate

Protocol: QUIC
Cipher: AES_256_GCM
Key exchange group: X25519MLKEM768
Signature algorithm: 2052
Subject: exploit-db.com
Issuer: Starfield TLS Intermediate CA DV - R1v1
San: www.exploit-db.comexploit-db.com
San count: 2
Wildcard: no
Valid from: 2026-07-28 12:29:11
Valid to: 2026-10-26 12:29:11
Days remaining: 65
Self signed: no
Ct compliance: unknown
Ech: no

technology detected

Server

Raw: Sucuri/Cloudproxy
Name: Sucuri
Version: Cloudproxy
Family: unknown

Frameworks

Name
Vue
Version
2.6.10

Js

Name
jQuery
Version
3.3.1
Name
Bootstrap
Version
4.1.3
Name
Moment.js
Version
2.29.4
Name
Axios
Name
DataTables

Analytics

Name
Google Analytics

Cdn

Sucuri

Protocol

h3

what blocks us

Detected: yes
Kind: sucuri
Vendor: Sucuri
Label: Sucuri WAF
Confidence: 65
Signals: x-sucuri-id headerSucuri cloudproxy marker
Self clearing: yes
Cleared: no
Waited ms: 12211
Http code: 200
Via: chrome-stealth

contacts published

Total0

crypto addresses

Total0

forms on the page

Count

1

Kinds

Other: 1

Has login

Has search

Has upload

Forms

Kind
other
Method
get
Action
https://www.exploit-db.com/search
Inputs
12
Types
textcheckboxsubmit
Password
no
File
no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 12
internal not tracked internal 48
external not tracked external 20
total not tracked total 198
truncated not tracked truncated

response headers

Header	Value
`alt-svc`	h3=":443"; ma=86400
`cache-control`	no-cache, private
`content-encoding`	gzip
`content-length`	17317
`content-type`	text/html; charset=UTF-8
`date`	Fri, 21 Aug 2026 17:57:37 GMT
`referrer-policy`	same-origin
`server`	Sucuri/Cloudproxy
`strict-transport-security`	max-age=63072000; includeSubdomains; preload
`vary`	Accept-Encoding
`x-content-type-options`	nosniff
`x-frame-options`	DENY
`x-sucuri-cache`	HIT
`x-sucuri-id`	15012
`x-xss-protection`	1; mode=block