Repositories list

• KEV

  Public
  Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

  exploitsvulnerability0day+ 2cisacisa-kev

  Apache License 2.0

  •42•575•0•0•Updated Jul 8, 2025Jul 8, 2025

• agent_osv

  Public
  OSV Agent to find existing vulnerabilities affecting projects dependencies

  Python

  •

  Apache License 2.0

  •0•4•0•0•Updated Jul 7, 2025Jul 7, 2025

• oxo

  Public
  OXO is a security scanning orchestrator for the modern age.

  securityscannersecurity-scanner+ 1security-tools

  Python

  •

  Apache License 2.0

  •56•552•0•0•Updated Jul 5, 2025Jul 5, 2025

• agent_asteroid

  Public
  Agent responsible for detecting remote vulnerabilities, a robust scanner.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •5•30•0•0•Updated Jul 3, 2025Jul 3, 2025

• agent_nuclei

  Public
  Agent responsible for fast vulnerability scanning using Nuclei.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •2•10•0•0•Updated Jul 3, 2025Jul 3, 2025

• agent_nmap

  Public
  Agent responsible for network discovery and security auditing using Nmap.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •3•21•0•0•Updated Jun 24, 2025Jun 24, 2025

• KB

  Public
  Knowledge Base collects, stores, and retrieves known vulnerabilities.

  securityostorlab

  Python

  •

  Apache License 2.0

  •1•9•0•0•Updated Jun 19, 2025Jun 19, 2025

• oxotitan

  Public
  UI of the OXO open-source Vulnerability Scanner.

  vulnerability-scanners

  Vue

  •

  Apache License 2.0

  •0•6•0•0•Updated Jun 12, 2025Jun 12, 2025

• agent_whatweb

  Public
  Agent responsible for fingerprinting websites.

  securityscannerostorlab

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Jun 2, 2025Jun 2, 2025

• agent_trufflehog

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated May 29, 2025May 29, 2025

• agent_semgrep

  Public
  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated May 13, 2025May 13, 2025

• ostorlab_insecure_android_app

  Public
  Vulnerable Android application for Ostolab Security Scanner

  Java

  •

  Apache License 2.0

  •17•30•0•0•Updated May 13, 2025May 13, 2025

• agent_tracker

  Public
  Agent responsible for tracking a scan in the local runtime.

  agentostorlab

  Python

  •

  Apache License 2.0

  •1•3•0•0•Updated Apr 30, 2025Apr 30, 2025

• agent_local_persist_vulnz

  Public
  Agent responsible for persisting vulnerabilities in the local runtime.

  agentsecurityostorlab

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Apr 30, 2025Apr 30, 2025

• agent_zap

  Public
  Agent implementation of the Zed Attack Proxy (ZAP) security scanner. ZAP is a very popular web scanner and proxy maintained by the OWASP org.

  Python

  •

  Apache License 2.0

  •2•9•0•0•Updated Apr 3, 2025Apr 3, 2025

• ostorlab_actions

  Public
  Ostorlab Github Actions to complement your CI/CD with Security Testing.

  Apache License 2.0

  •1•19•0•0•Updated Mar 27, 2025Mar 27, 2025

• agent_openvas

  Public
  Agent responsible for network security and vulnerability scanning using OpenVas.

  agentsecurityscanner+ 1ostorlab

  Shell

  •

  Apache License 2.0

  •3•7•0•0•Updated Mar 14, 2025Mar 14, 2025

• agent_opengrep

  Public
  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Mar 13, 2025Mar 13, 2025

• agent_metasploit

  Public
  Agent metasploit

  PowerShell

  •

  Apache License 2.0

  •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_nebula

  Public
  The Nebula Agent is responsible of persisting all types of messages locally.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• ostorlab_insecure_ios_app

  Public
  Vulnerable Ios application for Ostolab Security Scanner

  Dart

  •

  Apache License 2.0

  •9•7•0•0•Updated Mar 12, 2025Mar 12, 2025

• py3chrome

  Public
  A Python Package for the Google Chrome Dev Protocol.

  Python

  •

  Other

  •118•0•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_whois_ip

  Public
  Agent responsible for retrieving registry and information of an IP.

  Python

  •

  Apache License 2.0

  •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• ostorlab_azure_devops_extension

  Public
  Ostorlab Azure DevOps extension to complement your CI/CD with Security Testing.

  TypeScript

  •

  MIT License

  •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_inject_asset

  Public
  Agent responsible for injecting an asset into the bus from the runtime.

  agentsecurityostorlab

  Python

  •

  Apache License 2.0

  •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_amass

  Public
  Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_debug

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025

• agent_all_tlds

  Public
  Injects all domains names of all known TLD from a source domain.

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025

• agent_dnsx

  Public
  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Mar 11, 2025Mar 11, 2025

• agent_whois_domain

  Public
  Agent responsible for retrieving WHOIS information of a domain.

  agentwhoiswhois-lookup+ 1ostorlab

  Python

  •

  Apache License 2.0

  •1•2•0•0•Updated Mar 11, 2025Mar 11, 2025