VANTA v2.0 — Exposure Intelligence Engine

██╗ ██╗ █████╗ ███╗ ██╗████████╗ █████╗ ██║ ██║██╔══██╗████╗ ██║╚══██╔══╝██╔══██╗ ██║ ██║███████║██╔██╗ ██║ ██║ ███████║ ╚██╗ ██╔╝██╔══██║██║╚██╗██║ ██║ ██╔══██║ ╚████╔╝ ██║ ██║██║ ╚████║ ██║ ██║ ██║ ╚═══╝ ╚═╝ ╚═╝╚═╝ ╚═══╝ ╚═╝ ╚═╝ ╚═╝

EXPOSURE INTELLIGENCE ENGINE v2.0 // READY

VANTA is an advanced automated web security & sensitive-data exposure scanner. It is engineered to detect credential leaks, API keys, authentication tokens, database connection strings, internal IP addresses, and sensitive configuration files exposed on web applications.

---

⚠️ Legal Disclaimer

WARNING: This tool is created strictly for authorized security auditing, ethical penetration testing, and defensive asset monitoring. Running VANTA against targets without explicit, written authorization from the system owner is illegal. The developers accept no liability and are not responsible for any misuse or damage caused by this software.

---

⚡ Key Features

• Same-Origin Asset Discovery: Strict scope enforcement that keeps scanning bounded within the target domain.
• Robot & Sitemap Intelligence: Automatic link extraction from robots.txt, sitemap.xml, and recursive sitemap indexes.
• Active Path Probing: Optional active inspection for critical files and paths (e.g., .env, config.php, web.config, error.log, API endpoints).
• Comprehensive Secret Detection:
  • API Keys: Stripe, AWS Access Key, Google Cloud API Key, GitHub Token, Slack Token, OAuth Token.
  • Cloud & Messaging Exposure: S3/GCS/Azure bucket URLs, Discord Webhooks, Telegram Bot Tokens, Twilio credentials.
  • Private Keys: RSA/OpenSSH/private key headers.
  • Tokens & Secrets: JWT (JSON Web Tokens), Hardcoded Passwords, Secret Keys.
  • Databases: MySQL, PostgreSQL, MongoDB, and Redis connection strings.
  • Internal Assets: Private IPs (RFC1918), Email Exposures, and sensitive file references (.env, RSA keys, SQL dumps).
• Live Key Validation (Optional): --validate verifies supported keys against official provider APIs (Stripe + AWS STS when key pairs are available).
• Frontend Deep Inspection (Optional): Source map downloading (--download-sourcemaps) and SPA rendering (--render-js via Playwright).
• Advanced Auth Headers: Repeatable --header "Name: Value" for ****** and custom auth schemes.
• Optional Traffic Rotation: --user-agent-rotate rotates desktop browser User-Agents, and --proxy-list rotates outbound proxies from a file.
• Raw Secret Preservation: Displays and records detected findings without redaction for immediate validation by incident response teams.
• Multithreaded & Rate-Controlled: Parallel processing using thread pools, configurable request pacing, and automatic retry handling.
• JSON Intelligence Reports: Structured JSON output containing full threat profiles, statistics, and category breakdowns.

---

📋 System Requirements

• Python: Version 3.8 or higher.
• Required Libraries:
  • requests
  • urllib3
  • colorama
  • playwright (optional, only for --render-js)

---

📥 Installation

1. Clone this repository or download vanta.py:

   git clone https://github.com/eLgorythm/VANTA.git
   cd VANTA
   

• Install the required dependencies: python3 -m pip install requests colorama

🚀 Usage Guide

1. Basic Scan (Passive Discovery) Performs standard crawling on accessible pages, robots.txt, and sitemap.xml: python3 vanta.py https://target-app.com

2. Active Probing Mode Enables probing for sensitive common paths (/.env, /config.json, /logs, etc.): python3 vanta.py https://target-app.com --active

3. Generate JSON Intelligence Report Saves all telemetry, findings, and risk assessments into a JSON file: python3 vanta.py https://target-app.com --active -o vanta_report.json

4. Stealth / Low-Paced Scan (WAF & Rate Limit Avoidance) Limits worker threads, introduces delay between requests, and extends network timeout: python3 vanta.py https://target-app.com
   --active
   --threads 5
   --rate-limit 0.2
   --timeout 15
   -o vanta_report.json

5. Authenticated Asset Scan Injects a session cookie to inspect endpoints behind authentication: python3 vanta.py https://target-app.com
   --cookie-name PHPSESSID
   --session "a1b2c3d4e5f6g7h8i9j0"

6. Lab Environment (Self-Signed Certificates) Disables TLS/SSL certificate verification for local/lab auditing: python3 vanta.py https://192.168.1.100 --active --insecure

7. Active Validation + Auth Header Validate supported keys and use bearer token authentication: python3 vanta.py https://target-app.com
   --validate
   --header "Authorization: ******"

8. SPA + Source Map Inspection Render client-side JavaScript and inspect source maps: python3 vanta.py https://target-app.com
   --render-js
   --download-sourcemaps

9. Optional User-Agent + Proxy Rotation Rotate User-Agent and proxies (one proxy URL per line): python3 vanta.py https://target-app.com
   --user-agent-rotate
   --proxy-list proxies.txt

⚙️ Command Line Options

Flag	Long Flag	Description	Default
target	—	Target URI to scan (Required).	—
-s	--session	Session cookie authentication token.	None
	--cookie-name	Name of the session cookie key.	session
-t	--threads	Number of worker threads (concurrency).	10
	--timeout	HTTP request timeout in seconds.	10
	--rate-limit	Minimum delay between requests in seconds.	0.0
	--max-urls	Maximum URL discovery threshold.	500
	--max-response-size	Maximum allowable response body in bytes.	10485760 (10MB)
	--active	Enables active path probing (.env, configs, logs).	False
	--validate	Validate supported credentials against provider APIs.	False
	--download-sourcemaps	Download and inspect .js.map source maps.	False
	--render-js	Use Playwright headless browser for SPA rendering.	False
	--header	Custom header (repeatable, Name: Value).	None
	--user-agent-rotate	Rotate User-Agent from built-in desktop browser pool.	False
	--proxy-list	Path to file with proxy URLs (one per line).	None
	--insecure	Bypasses SSL/TLS certificate verification.	False
-o	--output	File path to write the JSON report.	None

Rotation precedence: if --header "User-Agent: ..." is supplied, that explicit custom value takes priority and User-Agent rotation is disabled for the run. Proxy rotation caveat: VANTA rotates proxies in round-robin per request and tolerates proxy request failures by continuing with the next proxy. Keep proxy list files private because authenticated proxy URLs may contain credentials. 📄 JSON Report Schema The generated JSON report (-o vanta_report.json) contains the following structured fields:

• vanta_engine: Engine metadata and version information.
• telemetry: Scan settings, ISO timestamp, and execution duration.
• statistics: Total discovered endpoints, inspected URLs, HTTP requests, and network errors.
• threat_assessment: Overall threat level (CRITICAL RISK, MODERATE RISK, LOW RISK, SECURE) and categorical breakdown.
• findings: Array of finding objects containing exact location URIs, raw unredacted values, context snippets, source type (raw_page / sourcemap_* / rendered_dom), and validation status metadata.

⚠️ Important: Because vanta_report.json stores exposed credentials in raw text, treat this report file as a sensitive credential store. Never commit scan reports to public version control repositories (e.g., Git). ⚠️ Validation mode sends discovered credential candidates to official provider endpoints for verification; use only with explicit authorization and approved scope.