> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Vuls: VULnerability Scanner - Agent-less Vulnerability Scanner for Linux, FreeBSD, Container, WordPress, Programming Language Libraries, Network Devices - URL: https://darkwebinformer.com/vuls-vulnerability-scanner-agent-less-vulnerability-scanner-for-linux-freebsd-container-wordpress-programming-language-libraries-network-devices/ - Published: 2024-08-14T15:22:26.000Z - Updated: 2025-09-04T22:27:42.000Z - Author: Dark Web Informer - Tags: Tools Direct Link: Last Commit: 1 Hour ago ![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/08/demo-1.gif) [![vuls-scan-en](https://asciinema.org/a/3y9zrf950agiko7klg8abvyck.png)](https://asciinema.org/a/3y9zrf950agiko7klg8abvyck) ![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/08/1245412451.png) --- ## Abstract [](https://github.com/future-architect/vuls#abstract) For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production environment, it is common for a system administrator to choose not to use the automatic update option provided by the package manager and to perform update manually. This leads to the following problems. - The system administrator will have to constantly watch out for any new vulnerabilities in NVD (National Vulnerability Database) or similar databases. - It might be impossible for the system administrator to monitor all the software if there are a large number of software packages installed in the server. - It is expensive to perform analysis to determine the servers affected by new vulnerabilities. The possibility of overlooking a server or two during analysis is there. Vuls is a tool created to solve the problems listed above. It has the following characteristics. - Informs users of the vulnerabilities that are related to the system. - Informs users of the servers that are affected. - Vulnerability detection is done automatically to prevent any oversight. - A report is generated on a regular basis using CRON or other methods. to manage vulnerability. ![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/08/85491823.png) --- ## Main Features [](https://github.com/future-architect/vuls#main-features) ### Scan for any vulnerabilities in Linux/FreeBSD/Windows/macOS [](https://github.com/future-architect/vuls#scan-for-any-vulnerabilities-in-linuxfreebsdwindowsmacos) [Supports major Linux/FreeBSD/Windows/macOS](https://vuls.io/docs/en/supported-os.html) - Alpine, Amazon Linux, CentOS, AlmaLinux, Rocky Linux, Debian, Oracle Linux, Raspbian, RHEL, openSUSE, openSUSE Leap, SUSE Enterprise Linux, Fedora, and Ubuntu - FreeBSD - Windows - macOS - Cloud, on-premise, Running Docker Container ### High-quality scan [](https://github.com/future-architect/vuls#high-quality-scan) - Vulnerability Database - [NVD](https://nvd.nist.gov/) - [JVN(Japanese)](http://jvndb.jvn.jp/apis/myjvn/) - OVAL - [Red Hat](https://www.redhat.com/security/data/oval/) - [Debian](https://www.debian.org/security/oval/) - [Ubuntu](https://security-metadata.canonical.com/oval/) - [SUSE](http://ftp.suse.com/pub/projects/security/oval/) - [Oracle Linux](https://linux.oracle.com/security/oval/) - Security Advisory - [Alpine-secdb](https://git.alpinelinux.org/cgit/alpine-secdb/) - [Red Hat Security Advisories](https://access.redhat.com/security/security-updates/) - [Debian Security Bug Tracker](https://security-tracker.debian.org/tracker/) - [Ubuntu CVE Tracker](https://people.canonical.com/~ubuntu-security/cve/) - [Microsoft CVRF](https://api.msrc.microsoft.com/cvrf/v2.0/swagger/index) - Commands(yum, zypper, pkg-audit) - RHSA / ALAS / ELSA / FreeBSD-SA - Changelog - PoC, Exploit - [Exploit Database](https://www.exploit-db.com/) - [Metasploit-Framework modules](https://www.rapid7.com/db/?q=&type=metasploit) - [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) - [nomi-sec/PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub) - [gmatuz/inthewilddb](https://github.com/gmatuz/inthewilddb) - CERT - [US-CERT](https://www.us-cert.gov/ncas/alerts) - [JPCERT](http://www.jpcert.or.jp/at/2019.html) - CISA(Cybersecurity & Infrastructure Security Agency) - [Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) - Cyber Threat Intelligence(MITRE ATT&CK and CAPEC) - [mitre/cti](https://github.com/mitre/cti) - Libraries - [aquasecurity/vuln-list](https://github.com/aquasecurity/vuln-list) - WordPress - [wpscan](https://wpscan.com/api) ### Scan mode [](https://github.com/future-architect/vuls#scan-mode) [Fast Scan](https://vuls.io/docs/en/architecture-fast-scan.html) - Scan without root privilege, no dependencies - Almost no load on the scan target server - Offline mode scan with no internet access. (CentOS, Alma Linux, Rocky Linux, Debian, Oracle Linux, Red Hat, Fedora, and Ubuntu) [Fast Root Scan](https://vuls.io/docs/en/architecture-fast-root-scan.html) - Scan with root privilege - Almost no load on the scan target server - Detect processes affected by update using yum-ps (Amazon Linux, CentOS, Alma Linux, Rocky Linux, Oracle Linux, Fedora, and RedHat) - Detect processes which updated before but not restarting yet using checkrestart of debian-goodies (Debian and Ubuntu) - Offline mode scan with no internet access. (CentOS, Alma Linux, Rocky Linux, Debian, Oracle Linux, Red Hat, Fedora, and Ubuntu) ### [Remote, Local scan mode, Server mode](https://vuls.io/docs/en/architecture-remote-local.html) [](https://github.com/future-architect/vuls#remote-local-scan-mode-server-mode) [Remote scan mode](https://vuls.io/docs/en/architecture-remote-scan.html) - User is required to only set up one machine that is connected to other target servers via SSH [Local scan mode](https://vuls.io/docs/en/architecture-local-scan.html) - If you don't want the central Vuls server to connect to each server by SSH, you can use Vuls in the Local Scan mode. [Server mode](https://vuls.io/docs/en/usage-server.html) - First, start Vuls in server mode and listen as an HTTP server. - Next, issue a command on the scan target server to collect software information. Then send the result to Vuls Server via HTTP. You receive the scan results as JSON format. - No SSH needed, No Scanner needed. Only issuing Linux commands directory on the scan target server. ### **Dynamic** Analysis [](https://github.com/future-architect/vuls#dynamic-analysis) - It is possible to acquire the state of the server by connecting via SSH and executing the command. - Vuls warns when the scan target server was updated the kernel etc. but not restarting it. ### Scan vulnerabilities of non-OS-packages [](https://github.com/future-architect/vuls#scan-vulnerabilities-of-non-os-packages) - Libraries of programming language - Self-compiled software - Network Devices Vuls has some options to detect the vulnerabilities - [Lockfile based Scan](https://vuls.io/docs/en/usage-scan-non-os-packages.html#library-vulns-scan) - [GitHub Integration](https://vuls.io/docs/en/usage-scan-non-os-packages.html#usage-integrate-with-github-security-alerts) - [Common Platform Enumeration (CPE) based Scan](https://vuls.io/docs/en/usage-scan-non-os-packages.html#cpe-scan) - [OWASP Dependency Check Integration](https://vuls.io/docs/en/usage-scan-non-os-packages.html#usage-integrate-with-owasp-dependency-check-to-automatic-update-when-the-libraries-are-updated-experimental) ## Scan WordPress core, themes, plugins [](https://github.com/future-architect/vuls#scan-wordpress-core-themes-plugins) - [Scan WordPress](https://vuls.io/docs/en/usage-scan-wordpress.html) ## MISC [](https://github.com/future-architect/vuls#misc) - Nondestructive testing - Pre-authorization is *NOT* necessary before scanning on AWS - Vuls works well with Continuous Integration since tests can be run every day. This allows you to find vulnerabilities very quickly. - Auto-generation of configuration file template - Auto-detection of servers set using CIDR, generate configuration file template - Email and Slack notification is possible (supports Japanese language) - Scan result is viewable on accessory software, TUI Viewer in a terminal or Web UI ([VulsRepo](https://github.com/ishiDACo/vulsrepo)). --- ## What Vuls Doesn't Do [](https://github.com/future-architect/vuls#what-vuls-doesnt-do) - Vuls doesn't update the vulnerable packages. --- ## Document [](https://github.com/future-architect/vuls#document) For more information such as Installation, Tutorial, Usage, visit [vuls.io](https://vuls.io/) [日本語翻訳ドキュメント](https://vuls.io/ja/) --- ## Authors [](https://github.com/future-architect/vuls#authors) kotakanbe ([@kotakanbe](https://twitter.com/kotakanbe)) created vuls and [these fine people](https://github.com/future-architect/vuls/graphs/contributors) have contributed. ## Contribute [](https://github.com/future-architect/vuls#contribute) see [vulsdoc](https://vuls.io/docs/en/how-to-contribute.html)