██▒   █▓▓█████  ▄████▄  ████████▓ ██▀███   ▄▄▄      
▓██░   █▒▓█   ▀ ▒██▀ ▀█  ╚══██╔══╝▓██ ▒ ██▒▒████▄    
 ▓██  █▒░▒███   ▒▓█    ▄    ██║   ▓██ ░▄█ ▒▒██  ▀█▄  
  ▒██ █░░▒▓█  ▄ ▒▓▓▄ ▄██▒   ██║   ▒██▀▀█▄  ░██▄▄▄▄██ 
   ▒▀█░  ░▒████▒▒ ▓███▀ ░   ██║   ░██▓ ▒██▒ ▓█   ▓██▒
   ░ ▐░  ░░ ▒░ ░░ ░▒ ▒  ░   ╚═╝   ░ ▒▓ ░▒▓░ ▒▒   ▓▒█░
   ░ ░░   ░ ░  ░  ░  ▒              ░▒ ░ ▒░  ▒   ▒▒ ░
     ░░     ░   ░                 ░░   ░   ░   ▒    
      ░     ░  ░░ ░                             ░  ░ 
     ░          ░                                    

📸 Terminal Interface Preview

⚡ Core Capabilities

• 🚀 Sub-Millisecond Search: Powered by SQLite FTS5 with BM25 ranking across descriptions, titles, affected products, software versions, and CWEs.
• 📦 Pre-Loaded & Offline: Over 25,000+ real CVE records and 3,608 GTFOBins exploitation payloads indexed directly on your local machine.
• 🎯 Service & Version Matching: Direct, fuzzy, and structured queries by software name and version (e.g. apache 2.4.49, openssh 8.2p1, vsftpd 2.3.4).
• 🛡️ Vulnerability Classification: Instant filtering by vulnerability category (rce, privesc, sqli, lfi, auth-bypass, memory-corruption, ssrf, dos).
• ⚔️ GTFOBins Integration: Complete offline database of Unix binaries with ready-to-run bypass commands for Sudo, SUID, Capabilities, Interactive Shells, Reverse Shells, and File Read/Write.
• 🎨 Responsive Cyberpunk Terminal: Visual CVSS heat-meters ([██████████] 10.0 CRITICAL), adaptive word-wrapping, syntax highlighting, and tab-autocompletion.
• 🐳 Docker Ready: Zero-configuration container support with persistent volume caching.

🚀 Quick Start

1. Installation

Clone the repository and install into your user environment:

git clone https://github.com/addisabrham36-boop/vectra.git
cd vectra

# Install dependencies and link executable globally
pip install -e .

You can now run vectra from any directory in your terminal!

2. Launching the Interactive Shell

Simply type:

vectra

Inside the interactive console:

⚡ vectra❯ search apache 2.4.49
⚡ vectra❯ rce tomcat
⚡ vectra❯ privesc kernel
⚡ vectra❯ sudo vim
⚡ vectra❯ suid bash
⚡ vectra❯ get CVE-2021-44228
⚡ vectra❯ stats

📖 Command Reference Cheat Sheet

💻 Direct CLI Usage (Non-Interactive)

You can run any command directly from your shell scripts or terminal:

Search by Service & Version:

vectra search "apache 2.4.49"
vectra search "vsftpd 2.3.4"
vectra search "seaweedfs" --type privesc

Search by Vulnerability Type:

vectra search --type rce --severity CRITICAL
vectra search "sudo" --type privesc
vectra search --type sqli

GTFOBins Privilege Escalation Payloads:

# Sudo root command execution for 'vim'
vectra gtfo vim -t sudo

# SUID exploitation for 'find'
vectra gtfo find -t suid

# Reverse shell for 'bash'
vectra gtfo bash -t reverse-shell

# List all exploit categories
vectra gtfo-list

Inspect Technical Details of a CVE:

vectra get CVE-2021-44228
vectra get CVE-2024-6387
vectra get CVE-2022-0847

🐳 Docker Deployment

Run Vectra in completely isolated Docker containers with persistent caching:

Interactive Terminal via Docker:

docker compose run --rm vectra-cli

REST API Service:

docker compose up -d vectra-api
# REST API endpoints available at http://127.0.0.1:8000
# OpenAPI Docs: http://127.0.0.1:8000/docs

🏛️ Architecture & Offline Storage

• Local Storage Path: ~/.local/share/vectra/cves.db
• Environment Variable: VECTRA_DATA_DIR=/custom/path

🛡️ License & Acknowledgements

• License: Released under the MIT License.
• Data Sources:
  • CVEProject / cvelistV5 (Official MITRE / CVE List v5)
  • GTFOBins (Curated Unix Binaries Privilege Escalation Project)