VulnerabiliTea

June 27, 2021 ยท View on GitHub

VulnerabiliTea is a Free and Open-Source security vulnerability management webapp for penetration testers.

Features

Manage all your security vulnerability discoveries in one place

  • A vast choice of fields, HTML descriptions
  • Attachments
  • Public and private discovery publishing
  • Editing after publishing
  • Activity feed with vote system for public discoveries (WIP)
  • Token-generation based share center for private discoveries
  • User profiles

Pre-Requisites

  • Node.JS
  • NPM
  • MongoDB

Installation & Deploying

Use the following command to install the package dependencies

npm i

Now you have two ways to deploy the webapp:

  1. Editing config.json manually and starting the webapp with node app.js

  2. Using environment variables
    If you are using this method you will be required to set the PORT and MONGODB_URI environment variables before starting. This can be done like so:

    /* Linux */
MONGODB_URI="mongodb://localhost/VulnerabiliTea" PORT=8080 node app.js

/* Windows (Powershell) */
$env:MONGODB_URI = "mongodb://localhost/VulnerabiliTea"
$env:PORT = 8081
node app.js

If you want HTTPS you must also set the ACME_URI and ACME_SERVE environment variables

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

License

MIT