██╗ ██╗ █████╗ ███╗ ███╗██████╗ ███████╗███████╗ ██████╗██╗ ██╗██████╗ ███████╗
██║ ██║██╔══██╗████╗ ████║██╔══██╗██╔════╝██╔════╝██╔════╝██║ ██║██╔══██╗██╔════╝
██║ ██║███████║██╔████╔██║██████╔╝███████╗█████╗ ██║ ██║ ██║██████╔╝█████╗
╚██╗ ██╔╝██╔══██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝ ██║ ██║ ██║██╔══██╗██╔══╝
╚████╔╝ ██║ ██║██║ ╚═╝ ██║██║ ███████║███████╗╚██████╗╚██████╔╝██║ ██║███████╗
╚═══╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚══════╝╚══════╝ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝╚══════╝
L A B S
Professional-grade security tooling for authorized penetration testing, vulnerability research and defensive operations.
| Tool | Category | Description | Findings |
|---|---|---|---|
| 🔍 RECONNAISSANCE & ATTACK SURFACE | |||
| vamp-passive-recon | RECON |
Passive ASM — DNS, WHOIS, certificate transparency, GitHub dorks, Shodan OSINT, tech fingerprinting | RECON-NNN |
| vamp-subdomain-takeover | RECON |
Subdomain takeover detector — CNAME dangling, service fingerprinting, 40+ provider signatures | SDT-NNN |
| vamp-cloud-enum | CLOUD |
Async public bucket/blob finder — S3, Azure Blob, GCP Storage. 462+ candidate names per target | CLOUD-NNN |
| 🔬 VULNERABILITY INTELLIGENCE | |||
| vamp-cve-oracle | VULN |
RBVM engine — NVD + CISA KEV + EPSS scoring, asset inventory, CVE-CPE correlation | RBVM-NNN |
| vamp-forticheck | VULN |
Multi-vendor edge device scanner — FortiOS, F5 BIG-IP, Palo Alto, Cisco ASA with live CVE probes | FTC-NNN |
| vamp-ssl-audit | CRYPTO |
TLS/SSL auditor with SSLabs-style grading — protocol versions, cipher suites, cert chain, HSTS | SSL-NNN |
| 🌐 WEB & API SECURITY | |||
| vamp-http-audit | WEB |
HTTP security auditor — security headers, CORS, CSP, clickjacking, open redirect, GraphQL introspection | HTTP-NNN |
| vamp-wp2shell-audit | WEB |
CMS security scanner — WordPress, Joomla & Drupal plugin/theme enumeration, known exploits | WP-NNN |
| vamp-jwt-audit | WEB |
JWT token auditor — alg:none, weak secrets (300K wordlist), JWKS confusion, claim tampering | JWT-NNN |
| 🏗 INFRASTRUCTURE & CONTAINERS | |||
| vamp-docker-audit | INFRA |
Docker daemon security auditor — socket exposure, privileged containers, secret ENV vars, network misconfig | DOCK-NNN |
| vamp-k8s-audit | INFRA |
Kubernetes security auditor — RBAC, privileged pods, network policies, secrets management, image risks | K8S-NNN |
| vamp-arp-sentinel | NETWORK |
ARP spoofing & MITM detector — passive monitoring, gateway verification, alert on anomalies | ARP-NNN |
| vamp-icmp-shadow | NETWORK |
ICMP covert channel lab — exfiltration simulation, tunnel detection, firewall bypass probes | SEC-NNN |
| 🔑 SECRETS & CODE SECURITY | |||
| vamp-secrets-scanner | SAST |
Secrets & sensitive data scanner — git history, 80+ patterns, CI/CD pre-commit hook, SARIF output | SEC-NNN |
| vamp-entropy-watch | SAST |
Entropy-based ransomware & exfil detector — file system monitoring, Shannon entropy analysis | ENT-NNN |
| ⚡ EMERGING THREAT COVERAGE | |||
| vamp-llm-probe | AI SEC |
LLM endpoint security auditor — prompt injection, jailbreak probes, data extraction, rate limit testing | LLM-NNN |
| 📧 EMAIL SECURITY | |||
| vamp-mail-audit | EMAIL |
Email security auditor — SPF, DKIM (RSA key length), DMARC policy, open relay, STARTTLS enforcement | MAIL-NNN |
| 📊 LOGS & SIEM | |||
| vamp-log-hunter | SIEM |
IoC detector for server logs — SQLi, XSS, path traversal, webshells, brute force, scanner fingerprints | LOG-NNN |
| 🎯 REPORTING & ORCHESTRATION | |||
| vamp-penreport | REPORT |
Professional pentest report aggregator — consolidates all VSL JSON outputs into client-ready HTML/PDF | aggregator |
| vamp-orchestrator | META |
Meta-tool chaining 12 VSL scanners — parallel execution, unified findings, risk score 0-100 | aggregator |
| vamp-shellcode-lab | RED |
ARM64 shellcode research lab — macOS/Linux shellcode generation, encoding, analysis (authorized use) | SEC-NNN |
# Clone any tool
git clone https://github.com/Vampsecure-Labs/vamp-passive-recon
cd vamp-passive-recon && pip install -r requirements.txt
# Run an audit
python3 vamp_passive_recon.py --target example.com --report-html recon.html
# Orchestrate multiple tools in parallel
git clone https://github.com/Vampsecure-Labs/vamp-orchestrator
python3 vamp_orchestrator.py --targets example.com --report-html full_audit.html
# Consolidate all results into an executive report
git clone https://github.com/Vampsecure-Labs/vamp-penreport
python3 vamp_penreport.py *.json --client "Acme Corp" --report-html executive_report.htmlEvery tool exits with standardized exit codes for pipeline automation:
| Exit Code | Meaning |
|---|---|
0 |
No findings above LOW severity |
1 |
HIGH severity findings detected |
2 |
CRITICAL severity findings — pipeline should fail |
# GitHub Actions / Forgejo CI example
- name: Secret scan
run: python3 vamp_secrets_scanner.py --path . --output secrets.json
continue-on-error: false # exit 2 = CRITICAL = pipeline failsAll tools produce a consistent JSON schema for interoperability:
{
"tool": "vamp-http-audit",
"version": "2.0",
"target": "https://example.com",
"timestamp": "2026-08-03T12:00:00Z",
"findings": [
{
"id": "HTTP-001",
"severity": "HIGH",
"title": "Missing Content-Security-Policy header",
"description": "...",
"evidence": "...",
"remediation": "..."
}
],
"summary": { "total": 1, "critical": 0, "high": 1, "medium": 0, "low": 0 }
}Use vamp-penreport to aggregate outputs from multiple tools into a single client-ready report.
© VampSecure Studios — VampSecure Labs Security Research Division
All tools are released for authorized security testing only. Usage against systems without explicit written permission is prohibited.