Vulnrepo

Overview

VULNRΞPO is a Vulnerability Report Generator & Repository that allows users to securely store and manage vulnerability data. It provides full confidentiality of data through end-to-end encryption and ensures that nothing is sent out by default. The tool operates purely on the front-end technology using pure JS client, without the need for a backend system. Users can use custom issue templates and import data from various security scanners. Reports can be downloaded in TXT, HTML, and encrypted HTML formats. The tool also supports attachments, changelogs, and allows for exporting issues to bugtrackers. Additionally, users have the option to share reports using AES encryption and can customize the HTML report template. VULNRΞPO is released under the Apache 2.0 Licence.

Features

• End-to-End Encryption: Provides full confidentiality of data with AES encryption and ensures that nothing is sent out by default.
• Custom Issue Templates: Users can use custom issue templates to speed up their work.
• Import from Security Scanners: Supports importing data from Nmap, Nessus, Burp, OpenVAS, Bugcrowd, and Trivy.
• Multiple Report Formats: Users can download reports in TXT, HTML, and encrypted HTML formats.
• Attachments: Users can easily attach files such as screenshots, movies, or scanner output with automatic checksum generation.
• Changelog: Logs all important changes in the report and updates it to the next version.
• Export Issues: Allows users to export issues to bugtrackers like Atlassian JIRA or share issues securely.
• Report Sharing: Users can share reports using AES encryption by default.
• API Integration: Provides the option to build a backend system for storing reports.
• Report Template Customization: Allows easy template editing or CSS customization for the HTML report.
• Methodology: Provides an audit tool to ensure that nothing is missing in the report.
• Development Server: Users can run a development server for testing changes.
• Docker Setup: Allows running the project as a Docker build using the included docker-compose.yml.
• Licencing: VULNRΞPO is released under the Apache 2.0 Licence.