Skip to content

VX v0.1.0 — Initial Release

Latest
Latest

Choose a tag to compare

View all tags
@MakFly MakFly released this 11 Apr 01:13
v0.1.0
6931f9f

VX Security Scanner v0.1.0

First public release of VX — a fast, multi-module security scanner for web applications.

Highlights

  • 16 remote scan modules: headers, cookies, TLS, CORS, XSS, SQLi, open redirect, path traversal, webservice/API, discovery (tech fingerprint + 27 sensitive paths + SPF/DMARC/DKIM + dangling CNAME), info disclosure, port scan, subdomain enum (80+), login audit, HTTP methods, JS endpoint discovery
  • 5 local audit modules: hardcoded secrets (12 patterns + entropy), env files, dependency CVEs via OSV.dev (npm/composer/go/pip/cargo), code vulnerability patterns (PHP/JS/TS/Go/Python/Java), auth & framework config (Next.js/Express/Symfony/Laravel)
  • 6 output formats: terminal (colored), JSON, HTML (standalone dark theme), SARIF (GitHub Code Scanning), markdown (PR comments), badge (shields.io)
  • GitHub Action with PR comments, SARIF upload, score badges, and threshold gating
  • SPA false-positive detection for Next.js, React, Vue, Angular, Nuxt
  • Scan history with compare/diff between scans
  • Interactive mode, config file (vx.yaml), legal disclaimer
  • Single binary, ~9MB, zero runtime dependencies

Install

# One-liner (Linux/macOS)
curl -fsSL https://raw.githubusercontent.com/MakFly/vx/main/install.sh | bash

# Or download a binary below and chmod +x

Quick Start

vx scan https://example.com          # Remote scan
vx audit ./my-project                # Local code audit
vx full ./project --url https://app  # Both combined
vx                                   # Interactive mode

Platforms

File OS Arch
vx-linux-amd64 Linux x86_64
vx-linux-arm64 Linux ARM64
vx-darwin-amd64 macOS Intel
vx-darwin-arm64 macOS Apple Silicon
vx-windows-amd64.exe Windows x86_64
Assets 7
Loading