Baraka-Malila/aivas

AI-Assisted Network Vulnerability Assessment System — lightweight CLI combining Nmap, NIST NVD CVE correlation, and LLM-powered bilingual (English/Swahili) security reports # AIVAS **AI-Assisted Network Vulnerability Assessment System** AIVAS is a free, offline-capable network vulnerability scanner for Linux. It combines Nmap service discovery, a local NIST NVD CVE database, active configuration probing, and optional AI-powered bilingual (English/Swahili) risk narration. --- ## Features - CVE correlation against a local SQLite database synced from NIST NVD (200,000+ CVEs) - CISA KEV flagging — marks CVEs actively exploited in the wild - Level 1 active configuration probing: missing security headers, exposed endpoints, risky HTTP methods - AI risk narration in English and Swahili via Groq or Ollama - Interactive Textual TUI with slash commands and AI-routed free text input - Scan history, HTML/PDF report export, and diff between scan sessions - Fully offline after initial database sync --- ## Requirements - Linux (Ubuntu 20.04+, Kali, Debian) - Python 3.10 or later - nmap (`sudo apt install nmap`) - pip 23 or later --- ## Installation ```bash pip install aivas ``` If `aivas` is not found after install, add the local bin directory to your PATH: ```bash echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc source ~/.bashrc ``` ### Install from source ```bash git clone github.com cd aivas python3 -m pip install --upgrade pip python3 -m pip install -e ".[dev]" ``` --- ## Quick Start ```bash # Check your setup aivas doctor # Populate the CVE database (from local NVD JSON feeds) aivas update-db --source /path/to/nvd-json-data-feeds/ # Or sync from the NVD API aivas update-db # Sync known exploited vulnerabilities aivas update-kev # Launch the interactive interface aivas ``` --- ## Usage ### Interactive TUI Run `aivas` with no arguments to open the interface. Type `/help` for a full command list. | Command | Description | |---------|-------------| | `/scan ` | Full CVE and config probe scan | | `/quick ` | Fast service scan (level 1) | | `/deep [--udp]` | Full scan with UDP di …