Skip to main content

Title: Vectra – Offline CVE & GTFOBins intelligence engine

0
Medium
Published: 09/04/2026 (09/04/2026, 15:05:10 UTC)
Source: Reddit Cybersecurity

Description

Vectra is an offline vulnerability and exploitation intelligence engine designed for use in terminal environments. It provides fast local search capabilities across over 25,000 CVEs and integrates a database of 3,608 GTFOBins privilege escalation payloads for Unix binaries. The tool supports service and version matching, vulnerability classification, and includes a user-friendly interactive terminal interface with autocompletion and visual CVSS scoring. It is intended for penetration testers, red teamers, and CTF players who may have limited or no internet access. Vectra is open source and container-ready, facilitating easy deployment and offline usage.

Reddit Discussion

r/cybersecurity·posted by u/abrsh_2a3774
00

Title: Vectra – Offline CVE & GTFOBins intelligence engine for your terminal

Hey everyone,

I built Vectra (https://github.com/addisabrham36-boop/vectra), a fast, local vulnerability and exploitation search engine designed for CTF challenges, red teamers, and penetration testing where internet access may be limited or slow.

Key features:

- Sub-millisecond SQLite FTS5 BM25 search across 25,000+ indexed CVEs.

- Instant service & version matching (e.g., apache 2.4.49, openssh 8.2, vsftpd 2.3.4).

- Integrated GTFOBins database with 3,608 privilege escalation payloads across 458 Unix binaries (Sudo, SUID, Shells, Reverse Shells).

- Full-featured interactive terminal REPL with autocompletion and visual CVSS score meters.

- Containerized support (Docker & Docker Compose) with optional REST API.

Code: https://github.com/addisabrham36-boop/vectra

Feedback, issue reports, and contributions are welcome!

Links cited in this discussion

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/07/2026, 15:24:20 UTC

Technical Analysis

Vectra is a local, offline-first terminal search engine that indexes over 25,000 CVE records and 3,608 GTFOBins payloads to assist security professionals in vulnerability research and exploitation. It uses SQLite FTS5 with BM25 ranking for sub-millisecond search performance and supports structured queries by software and version. The tool offers filtering by vulnerability categories such as remote code execution, privilege escalation, SQL injection, and others. It includes a comprehensive offline database of Unix binaries with ready-to-run exploitation payloads for privilege escalation techniques. Vectra features an interactive REPL terminal interface with autocompletion, syntax highlighting, and visual CVSS heat meters. It supports Docker container deployment and provides a REST API for integration. The project is open source under the MIT license and sources data from official CVE and GTFOBins repositories.

Potential Impact

Vectra itself is not a vulnerability or exploit but a security tool that facilitates offline vulnerability research and exploitation payload lookup. It does not introduce a security risk or vulnerability. Instead, it enhances the efficiency of penetration testers and red teamers by providing rapid access to vulnerability intelligence and exploitation techniques without requiring internet connectivity.

Defensive Guidance

No remediation or mitigation is required as Vectra is a security research tool, not a vulnerability. Users should ensure they download and use the tool from trusted sources and keep it updated to benefit from the latest CVE and GTFOBins data. No security risk is posed by the tool itself.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Source Type
reddit
Subreddit
cybersecurity
Reddit Score
0
Discussion Level
minimal
Content Source
reddit_link_post
Post Type
link
Newsworthiness Assessment
{"score":35,"reasons":["external_link","established_author","recent_news"],"isNewsworthy":true}
Has External Source
true
Trusted Domain
false

Threat ID: 6a9b4812acd9273b495d562a

Added to database: 09/04/2026, 22:37:06 UTC

Last enriched: 09/07/2026, 15:24:20 UTC

Last updated: 10/04/2026, 01:11:14 UTC

Views: 102

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses