Complete security research platform combining CVSS v3.1 scoring with advanced vulnerability analytics.
Created by Dharmendra Kumar (dharmendrastm) for security researchers, penetration testers, and bug bounty hunters worldwide.
- ✅ Official CVSS v3.1 Algorithm - Accurate base score calculation
- ✅ Button-Style Metrics - Intuitive selection interface
- ✅ 8 Base Metrics - Attack Vector, Complexity, Privileges, User Interaction, Scope, CIA Impact
- ✅ Real-Time Scoring - Instant score calculation with severity rating
- ✅ Vector String Generation - Standard CVSS v3.1 vector format
- ✅ Copy Score - Quick clipboard copy functionality
- ✅ Screenshot Result - Export CVSS result as image
- ✅ 4 Interactive Charts - Bar, Pie, Line, and Doughnut visualizations
- ✅ Real-Time Statistics - Automatic totals and percentage calculations
- ✅ Risk Level Indicator - Overall risk assessment based on severity distribution
- ✅ Individual Chart Downloads - Export each chart as high-quality PNG
- ✅ Multiple Screenshot Options - Capture graphs, input panel, or full dashboard
- ✅ Data Persistence - Save/Load reports using LocalStorage
- ✅ Dark Cybersecurity Theme - Eye-friendly interface for long research sessions
- ✅ Glassmorphism Effects - Modern UI with backdrop blur
- ✅ Neon Color Scheme - Professional and visually appealing
- ✅ Report-Ready Graphics - Large, clear charts perfect for documentation
- ✅ Responsive Layout - Works on desktop, tablet, and mobile devices
- ✅ Visitor Counter - Track tool usage
- Select Metrics: Click buttons to choose values for all 8 base metrics
- Calculate: Click "Calculate CVSS v3.1 Score" button
- View Results: See score, severity, and vector string
- Copy or Screenshot: Save your results
Example Metrics:
Attack Vector: Network (N)
Attack Complexity: Low (L)
Privileges Required: None (N)
User Interaction: None (N)
Scope: Unchanged (U)
Confidentiality: High (H)
Integrity: High (H)
Availability: High (H)
Result: Score: 9.8 - CRITICAL
- Enter Counts: Input number of vulnerabilities for each severity level
- Generate Graphs: Click "Generate" button
- View Analytics: 4 different chart types for comprehensive analysis
- Export Reports: Download individual charts or full dashboard
- Save Data: Save your report for future reference
Chart Types:
- Bar Chart - Severity distribution comparison
- Pie Chart - Vulnerability breakdown with percentages
- Line Chart - Risk trend analysis
- Doughnut Chart - Severity proportion visualization
Official Formula Used:
// Impact Sub Score (ISS)
ISS = 1 - ((1 - Confidentiality) × (1 - Integrity) × (1 - Availability))
// Impact
Impact (Unchanged Scope) = 6.42 × ISS
Impact (Changed Scope) = 7.52 × (ISS - 0.029) - 3.25 × (ISS - 0.02)^15
// Exploitability
Exploitability = 8.22 × AttackVector × AttackComplexity × PrivilegesRequired × UserInteraction
// Base Score
BaseScore (Unchanged) = min(Impact + Exploitability, 10)
BaseScore (Changed) = min(1.08 × (Impact + Exploitability), 10)
// Round up to 1 decimal place
FinalScore = ceil(BaseScore × 10) / 10Severity Ratings:
| Score Range | Severity | Color |
|---|---|---|
| 0.0 | None | Blue |
| 0.1 - 3.9 | Low | Green |
| 4.0 - 6.9 | Medium | Red |
| 7.0 - 8.9 | High | Orange |
| 9.0 - 10.0 | Critical | Dark Red |
- HTML5 - Structure
- CSS3 - Styling with custom properties and glassmorphism
- JavaScript (ES6+) - Core functionality
- Chart.js v4.4.0 - Interactive charts
- html2canvas v1.4.1 - Screenshot functionality
- LocalStorage API - Data persistence
- ✅ Chrome 90+
- ✅ Firefox 88+
- ✅ Safari 14+
- ✅ Edge 90+
- Download
ThreatMatrix.html - Open in any modern browser
- Start using immediately (no installation required!)
git clone https://github.com/dharmendrastm/ThreatMatrix.git
cd ThreatMatrixOpen ThreatMatrix.html in your browser.
Visit: https://dharmendrastm.github.io/ThreatMatrix
- Calculate CVSS scores for discovered vulnerabilities
- Document findings with visual reports
- Track vulnerability severity distribution
- Score identified vulnerabilities during assessments
- Generate professional reports for clients
- Visualize security posture improvements
- Quickly assess vulnerability severity
- Create comprehensive reports
- Track findings across multiple programs
- Include CVSS scores in vulnerability reports
- Add professional charts to presentations
- Maintain consistent scoring methodology
- Teach CVSS v3.1 scoring methodology
- Demonstrate real-world vulnerability assessment
- Practice report generation
Edit CSS variables in the :root section:
:root {
--neon-blue: #00d4ff; /* Primary accent */
--neon-purple: #b620e0; /* Secondary accent */
--neon-green: #39ff14; /* Success color */
--neon-red: #ff073a; /* Danger color */
}Extend the CVSS calculator by modifying the CVSS_WEIGHTS object:
const CVSS_WEIGHTS = {
// Add your custom metric weights here
};- Download each chart separately as PNG
- High-quality 2x scale for print
- Transparent or solid backgrounds
- Complete screenshot of entire dashboard
- Includes all charts and statistics
- Perfect for comprehensive reports
- Screenshot individual CVSS calculations
- Copy score to clipboard
- Save vector strings for documentation
- ✅ 100% Client-Side - No data sent to servers
- ✅ LocalStorage Only - Data stays on your device
- ✅ No Tracking - No analytics or external requests
- ✅ Open Source - Fully auditable code
- ✅ Offline Capable - Works without internet (after first load)
Contributions are welcome! Please follow these steps:
- Fork the repository
- Create a feature branch (
git checkout -b feature/AmazingFeature) - Commit changes (
git commit -m 'Add AmazingFeature') - Push to branch (
git push origin feature/AmazingFeature) - Open a Pull Request
- 🎨 UI/UX improvements
- 📊 Additional chart types
- 🔧 New export formats (PDF, CSV, JSON)
- 🌐 Internationalization (i18n)
- 📱 Mobile app version
- 🔌 API integration options
Found a bug? Please open an issue with:
- Detailed description
- Steps to reproduce
- Expected vs actual behavior
- Screenshots (if applicable)
- Browser and OS information
This project is licensed under the MIT License.
MIT License
Copyright (c) 2025 Dharmendra Kumar (dharmendrastm)
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Advanced OSINT & Security Research Tool by Dharmendra Kumar
Features:
- Domain Intelligence Gathering
- Subdomain Enumeration
- Technology Detection
- Security Headers Analysis
- And much more!
Visit: https://surfacehunter.vercel.app/
Cybersecurity Researcher & Developer
Passionate about cybersecurity, ethical hacking, and building tools that empower security researchers worldwide.
Aliases:
- dharmendrastm
- dharmendrahacker
- dharmendracyberhack
dharmendrahacker dharmendracyberhack cybersecurity ThreatMatrix ethical-hacking cvss-calculator vulnerability-assessment penetration-testing bug-bounty security-research osint infosec appsec devsecops security-tools
If you find ThreatMatrix useful, please:
- ⭐ Star this repository
- 🐛 Report bugs and suggest features
- 📢 Share with fellow security researchers
- 💬 Provide feedback
- Email: dharmendrastm@gmail.com
- Twitter: @dharmendrastm
- Discord: dharmendrastm#0000
- FIRST.org - For CVSS v3.1 specification
- Chart.js Team - For amazing charting library
- html2canvas Team - For screenshot functionality
- Security Community - For continuous feedback and support
- ✅ Initial release
- ✅ CVSS v3.1 calculator with official algorithm
- ✅ 4 interactive chart types
- ✅ Screenshot and export features
- ✅ Dark cybersecurity theme
- ✅ Visitor counter
- ✅ Save/Load functionality
- CVSS v4.0 support
- Temporal score calculation
- Environmental score calculation
- PDF export functionality
- CSV data export
- Multiple language support
- Cloud sync for reports
- Collaborative features
- API integration
- Mobile app (iOS/Android)
- Advanced analytics dashboard
- Custom metric definitions
