42 projects
vamp-supply-chain
Supply chain security scanner: SBOM, CVE checks, typosquatting detection and checksum verification. SAST cross-reference: used_in_code + import_lines per CVE finding.
vamp-iac-audit
Infrastructure-as-Code security auditor: Terraform, CloudFormation, Helm, Ansible, Pulumi and AWS SAM/CDK — 319 checks, 12 YAML rule files
vamp-host-audit
Auditor live multiplataforma de hosts: Linux · macOS · Windows — CIS · ENS · NIS2 · ISO 27001 · DORA
vamp-compliance-check
Auditor determinista de cumplimiento multi-marco: ENS · NIS2 · ISO 27001:2022 · DORA · EU AI Act · CSA CCM v4 · RGPD
vamp-api-probe
REST API security DAST scanner: BOLA, BFLA, mass assignment, rate limiting and OWASP API Top 10
vamp-ad-recon
Active Directory security auditor: Kerberoasting, AS-REP Roasting, delegation misconfigurations and privilege escalation paths. ENS RD 311/2022 control mapping in findings.
vamp-windows-audit
Windows Security Configuration Auditor — 15 CIS-aligned checks
vamp-waf-bypass
WAF evasion tester — 15 bypass checks for authorized security testing
vamp-rag-audit
RAG and agentic AI security auditor: prompt injection, context poisoning, data exfiltration
vamp-mobile-audit
OWASP MASVS 2.0 static auditor for APK and IPA files
vamp-ci-audit
CI/CD pipeline security auditor: GitHub Actions, GitLab CI and Forgejo Actions
vamp-aws-audit
Auditor CIS AWS Level 1 — 71 controles IAM/S3/EC2/CloudTrail/RDS/KMS/GuardDuty/Config
vamp-darkweb-intel
Darkweb & threat intelligence CLI — cross-source IOC lookup with automatic correlation across ThreatFox, URLhaus, MalwareBazaar, RansomLook, GreyNoise, Shodan and more
vamp-wp2shell-audit
WordPress upload-vector and webshell auditor for authorized assessments — XML-RPC and REST API user enumeration checks
vamp-cloud-enum
Cloud asset enumeration and exposure analysis for authorized audits
vamp-azure-audit
Microsoft Azure security auditor for authorized assessments
vamp-forticheck
Multi-vendor network appliance CVE scanner — FortiOS, PAN-OS, Cisco ASA/IOS-XE, Check Point, Juniper (HTTP version exposure + SNMP/SSH fingerprinting)
vamp-log-hunter
Log hunting and threat-pattern scanner for authorized security assessments, with fast-mode triage
vamp-k8s-audit
Kubernetes cluster security auditor — motor YAML extensible CIS K8s Benchmark, 58 checks (admission webhooks, storage, namespace policies, pods, RBAC), kube-bench wrapper, delta scan
vamp-http-audit
HTTP security headers and CORS auditor — CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy — librería importable
vamp-secrets-scanner
Static secrets and credentials scanner — motor de reglas YAML extensible, 300+ patrones (IA APIs, cloud, CI/CD, SaaS, enterprise, streaming, IoT, cripto), git history, entropía Shannon, SARIF 2.1.0, Docker/K8s, delta scan · librería importable
vamp-forensic-query
Forensic SQL/log query engine for authorized digital investigations
vamp-log-analyzer
Log analysis and threat correlation engine for authorized security reviews
vamp-docker-audit
Docker/container security auditor for authorized assessments, with delta scan · librería importable
vamp-penreport
Penetration test report generator for VampSecure Labs assessments — importable library + CLI (incl. CVSS 3.1 calculator, Jira, DefectDojo export and customizable PDF templates)
vamp-mail-audit
Email infrastructure and SPF/DKIM/DMARC auditor for authorized assessments — importable library + CLI
vamp-llm-probe
LLM API security auditor — prompt injection, jailbreak, ASCII smuggling, data exfiltration, OWASP LLM Top 10 mapping
vamp-ssl-audit
TLS/SSL security auditor — protocol version, cipher suites, certificate validity, HSTS preload, mTLS testing, daemon watch mode, delta scan · librería importable
vamp-jwt-audit
JWT security auditor — alg=none, RS256-to-HS256 confusion, HMAC brute force, kid/jku injection · librería importable
vamp-orchestrator
VampSecure Labs tool orchestrator for automated authorized security audits
vamp-easm
External Attack Surface Management (EASM) scanner for authorized audits
vamp-mcp-audit
Model Context Protocol (MCP) endpoint security auditor
vamp-subdomain-takeover
Subdomain takeover vulnerability scanner — automatic CNAME fingerprint verification and --no-verify mode
vamp-arp-sentinel
ARP monitoring and rogue-device detection for authorized network audits
vamp-gcp-audit
Google Cloud Platform security auditor for authorized assessments
vamp-passive-recon
Passive recon engine — subdomain enumeration, HTTP fingerprinting, GitHub dork scanning and people/email enumeration across 8+ OSINT sources
vamp-entropy-watch
High-entropy file and process monitor with ransomware extension correlation for authorized security assessments
vamp-shodan-hunt
Shodan OSINT hunter for attack-surface mapping in authorized audits
vamp-cve-oracle
CVE vulnerability intelligence aggregator for authorized security assessments
vamp-graphql-audit
GraphQL endpoint security auditor for authorized penetration tests
vamp-oauth-audit
OAuth 2.0 and OIDC security flow auditor
vamp-icmp-shadow
Covert ICMP channel demonstration tool for authorized Red/Blue Team labs
