Professional API Security Assessment Tool

VaultScope Enterprise is a professional-grade security assessment tool designed for testing localhost applications. Built with .NET 8.0 and Avalonia UI, it provides comprehensive vulnerability scanning capabilities with a modern, cross-platform interface.

• 🔍 Comprehensive Vulnerability Detection

  • SQL Injection
  • Cross-Site Scripting (XSS)
  • Command Injection
  • XML External Entity (XXE)
  • Server-Side Request Forgery (SSRF)
  • Path Traversal
  • Authentication Bypass
  • Security Headers Analysis

• 🎨 Modern User Interface

  • Beautiful purple/black dark theme
  • Smooth animations and transitions
  • Real-time scan progress
  • Interactive dashboard

• 📊 Advanced Reporting

  • HTML, JSON, and PDF export formats
  • Detailed vulnerability descriptions
  • OWASP categorization
  • Security scoring system

• 💾 Data Persistence

  • SQLite database with Entity Framework Core
  • Historical scan tracking
  • Trend analysis

• 🌍 Cross-Platform Support

  • Windows (.msi, .exe)
  • macOS (.dmg, .pkg)
  • Linux (.deb, .rpm, .AppImage)

• .NET 8.0 SDK
• Visual Studio 2022, VS Code, or JetBrains Rider

Download the latest release for your platform from the Releases page.

# Clone the repository
git clone https://github.com/cptcr/vaultscope.git
cd vaultscope

# Restore dependencies
dotnet restore

# Build the application
dotnet build --configuration Release

# Run the application
dotnet run --project src/VaultScope.UI/VaultScope.UI.csproj

1. Launch VaultScope Enterprise
2. Enter your localhost URL (e.g., http://localhost:3000)
3. Configure scan options:
   • Select vulnerability detectors
   • Set authentication if needed
   • Choose scan depth
4. Start the scan and monitor progress
5. Review results in the detailed report
6. Export findings in your preferred format

# Using the CLI (future feature)
vaultscope scan http://localhost:8080 --all-detectors --output report.html

vaultscope/
├── src/
│   ├── VaultScope.Core/           # Core models and interfaces
│   ├── VaultScope.Security/       # Vulnerability detectors
│   ├── VaultScope.Infrastructure/ # Data access and utilities
│   ├── VaultScope.UI/            # Avalonia UI application
│   └── VaultScope.Tests/         # Unit and integration tests
├── docs/                         # Documentation
├── scripts/                      # Build and deployment scripts
└── .github/                      # GitHub workflows

We welcome contributions! Please see our Contributing Guidelines for details.

# Install development dependencies
dotnet tool restore

# Run tests
dotnet test

# Run with hot reload
dotnet watch run --project src/VaultScope.UI/VaultScope.UI.csproj

Please review our Security Policy for reporting vulnerabilities.

This project is licensed under the MIT License - see the LICENSE file for details.

• Avalonia UI - Cross-platform UI framework
• Entity Framework Core - Data access
• ReactiveUI - MVVM framework
• OWASP - Security guidelines

• Documentation: vaultscope.dev/docs
• Issues: GitHub Issues
• Discussions: GitHub Discussions