vkxd/VeltCLI: all-in-one terminal security research workspace

 ██▒   █▓ ▓█████  ██▓   ▄▄▄█████▓
▓██░   █▒ ▓█   ▀ ▓██▒   ▓  ██▒ ▓▒
 ▓██  ▒░ ▒███   ▒██░   ▒ ▓██░ ▒░
  ▒██ █░░ ▒▓█  ▄ ▒██░   ░ ▓██▓ ░                          |
   ▒▀█░  ▒░▒████▒░██████  ▒██▒ ░
   ░ ▐░  ░░░ ▒░ ░░ ▒░▓    ▒ ░░
   ░ ░░  ░ ░ ░  ░░ ░ ▒      ░
     ░░      ░     ░ ░
      ░  ░   ░  ░    ░

Terminal-based OSINT & defensive security research toolkit.

VeltCLI brings reconnaissance, security checks, public-information research, and reporting into one CLI-driven interface.

🔎 Research. Analyze. Verify.

🖥️ Preview

✦ What is VeltCLI?

VeltCLI is an all-in-one terminal security research workspace.

Instead of jumping between dozens of tools, VeltCLI organizes common research workflows into a single interface.

┌─ VeltCLI
│
├── Vulnerability
├── DNS
├── Web Security
├── Social
├── Email
├── IP Intelligence
├── Cloud
├── People
├── News
├── Business
├── Geospatial
├── Images
├── Documents
├── Monitoring
├── Breaches
└── Temporary Mail

🚀 Features

⚡ Quick Start

1. Clone

git clone https://github.com/vkxd/VeltCLI.git
cd VeltCLI

2. Install dependencies

pip install -r requirements.txt

3. Launch

python main.py

🎮 How It Works

VeltCLI uses a simple category → tool → CLI workflow.

Category
   ↓
Tool
   ↓
Configure
   ↓
Run
   ↓
Results
   ↓
Export

Example:

/help
set target https://example.com
run

Export results whenever you need:

export json
export csv
export md

Reports are stored in:

outputs/

🧩 Example Tools

Username Research

/help
set username example_user
run

Returns possible public profile matches.

Results are leads, not proof of identity.

Security Headers

set target https://example.com
run

Checks headers such as:

Content-Security-Policy
Strict-Transport-Security
X-Frame-Options
Referrer-Policy
Permissions-Policy

DNS Research

set target example.com
run

Can inspect:

A / AAAA
MX
SPF
DMARC
DNSSEC
Nameservers
Reverse DNS

🏗️ Project Structure

VeltCLI/
├── core/          # Core application logic
├── plugins/       # VeltCLI tools & modules
├── ui/            # Terminal interface
├── docs/          # Documentation & assets
├── main.py        # Entry point
├── config.py      # Configuration
├── requirements.txt
└── outputs/       # Generated reports

🔌 API Providers

VeltCLI can optionally integrate with external providers such as:

• Shodan
• Have I Been Pwned
• GitHub
• Search providers
• Geocoding providers
• NVD / CVE providers

API keys are stored locally and masked in the interface.

🛡️ Safety

VeltCLI is designed for lawful OSINT and defensive security research.

It does not:

• ❌ Perform DDoS attacks
• ❌ Exploit vulnerabilities
• ❌ Test passwords against accounts
• ❌ Bypass CAPTCHAs or rate limits
• ❌ Access private profiles
• ❌ Track people in real time
• ❌ Claim public accounts belong to the same person

Use VeltCLI only against systems, data, and services you're authorized to research.

⚠️ Results ≠ Proof

VeltCLI produces research leads and configuration guidance.

Results can be affected by:

• Rate limits
• Blocked requests
• Missing API keys
• Network failures
• Incomplete public data
• False positives
• Provider changes

Verify important findings manually.

🗺️ Roadmap

• Modular CLI architecture
• Category-based interface
• Export system
• DNS research
• Web security checks
• Username research
• More plugins
• Improved reporting
• Plugin marketplace
• Better configuration system
• Expanded provider support

📜 License

VeltCLI is released under the MIT License.