Vulnrepo

Overview

VULNRΞPO is a Vulnerability Report Generator & Repository that allows users to securely store and manage vulnerability data. It provides full confidentiality of data through end-to-end encryption and ensures that nothing is sent out by default. The tool operates purely on the front-end technology using pure JS client, without the need for a backend system. Users can use custom issue templates and import data from various security scanners. Reports can be downloaded in TXT, HTML, and encrypted HTML formats. The tool also supports attachments, changelogs, and allows for exporting issues to bugtrackers. Additionally, users have the option to share reports using AES encryption and can customize the HTML report template. VULNRΞPO is released under the Apache 2.0 Licence.

Features

• End-to-End Encryption: Provides full confidentiality of data with AES encryption and ensures that nothing is sent out by default.
• Custom Issue Templates: Users can use custom issue templates to speed up their work.
• Import from Security Scanners: Supports importing data from Nmap, Nessus, Burp, OpenVAS, Bugcrowd, and Trivy.
• Multiple Report Formats: Users can download reports in TXT, HTML, and encrypted HTML formats.
• Attachments: Users can easily attach files such as screenshots, movies, or scanner output with automatic checksum generation.
• Changelog: Logs all important changes in the report and updates it to the next version.
• Export Issues: Allows users to export issues to bugtrackers like Atlassian JIRA or share issues securely.
• Report Sharing: Users can share reports using AES encryption by default.
• API Integration: Provides the option to build a backend system for storing reports.
• Report Template Customization: Allows easy template editing or CSS customization for the HTML report.
• Methodology: Provides an audit tool to ensure that nothing is missing in the report.
• Development Server: Users can run a development server for testing changes.
• Docker Setup: Allows running the project as a Docker build using the included docker-compose.yml.
• Licencing: VULNRΞPO is released under the Apache 2.0 Licence.

Summary

VULNRΞPO is a powerful Vulnerability Report Generator & Repository that provides users with a secure and efficient way to manage vulnerability data. With features like end-to-end encryption, custom issue templates, support for importing data from security scanners, and various report formats, it offers a comprehensive solution for security professionals. The tool also allows for easy customization of report templates, integration with bugtrackers, and sharing of reports using AES encryption. Its flexibility and ease of use make it a valuable tool for pentesters, security auditors, and organizations seeking efficient vulnerability management.