Repositories list

• oxo

  Public
  OXO is a security scanning orchestrator for the modern age.

  securityscannersecurity-scanner+ 1security-tools

  Python

  •

  Apache License 2.0

  •59•557•0•1•Updated Oct 17, 2025Oct 17, 2025

• agent_osv

  Public
  OSV Agent to find existing vulnerabilities affecting projects dependencies

  Python

  •

  Apache License 2.0

  •0•4•0•0•Updated Oct 15, 2025Oct 15, 2025

• KB

  Public
  Knowledge Base collects, stores, and retrieves known vulnerabilities.

  securityostorlab

  Python

  •

  Apache License 2.0

  •1•9•0•0•Updated Oct 13, 2025Oct 13, 2025

• agent_trufflehog

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 10, 2025Oct 10, 2025

• KEV

  Public
  Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

  exploitsvulnerability0day+ 2cisacisa-kev

  Apache License 2.0

  •42•588•0•0•Updated Oct 10, 2025Oct 10, 2025

• agent_nebula

  Public
  The Nebula Agent is responsible of persisting all types of messages locally.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Oct 8, 2025Oct 8, 2025

• agent_whatweb

  Public
  Agent responsible for fingerprinting websites.

  securityscannerostorlab

  Python

  •

  Apache License 2.0

  •1•1•0•0•Updated Oct 6, 2025Oct 6, 2025

• agent_zap

  Public
  Agent implementation of the Zed Attack Proxy (ZAP) security scanner. ZAP is a very popular web scanner and proxy maintained by the OWASP org.

  Python

  •

  Apache License 2.0

  •2•9•0•0•Updated Oct 6, 2025Oct 6, 2025

• ostorlab_actions

  Public
  Ostorlab Github Actions to complement your CI/CD with Security Testing.

  Apache License 2.0

  •1•19•0•0•Updated Oct 2, 2025Oct 2, 2025

• benchmarks

  Public
  Ostorlab Pentest Benchmarks

  Kotlin

  •

  Apache License 2.0

  •0•11•0•0•Updated Sep 26, 2025Sep 26, 2025

• gitlabci

  Public
  This is the source repository to build the docker image to be used within GitLab CI. This image gives you the ability to integrate Ostorlab automonomus security testing for Android and iOS mobile apps to your build process.

  Shell

  •

  Apache License 2.0

  •2•1•0•0•Updated Sep 24, 2025Sep 24, 2025

• oxotitan

  Public
  UI of the OXO open-source Vulnerability Scanner.

  vulnerability-scanners

  Vue

  •

  Apache License 2.0

  •0•6•0•0•Updated Sep 23, 2025Sep 23, 2025

• agent_asteroid

  Public
  Agent responsible for detecting remote vulnerabilities, a robust scanner.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •5•34•0•0•Updated Sep 22, 2025Sep 22, 2025

• agent_nmap

  Public
  Agent responsible for network discovery and security auditing using Nmap.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •3•21•0•0•Updated Jul 31, 2025Jul 31, 2025

• agent_nuclei

  Public
  Agent responsible for fast vulnerability scanning using Nuclei.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •2•10•0•0•Updated Jul 3, 2025Jul 3, 2025

• agent_semgrep

  Public
  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated May 13, 2025May 13, 2025

• ostorlab_insecure_android_app

  Public
  Vulnerable Android application for Ostolab Security Scanner

  Java

  •

  Apache License 2.0

  •17•33•0•0•Updated May 13, 2025May 13, 2025

• agent_tracker

  Public
  Agent responsible for tracking a scan in the local runtime.

  agentostorlab

  Python

  •

  Apache License 2.0

  •1•3•0•0•Updated Apr 30, 2025Apr 30, 2025

• agent_local_persist_vulnz

  Public
  Agent responsible for persisting vulnerabilities in the local runtime.

  agentsecurityostorlab

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Apr 30, 2025Apr 30, 2025

• agent_openvas

  Public
  Agent responsible for network security and vulnerability scanning using OpenVas.

  agentsecurityscanner+ 1ostorlab

  Shell

  •

  Apache License 2.0

  •3•7•0•0•Updated Mar 14, 2025Mar 14, 2025

• agent_opengrep

  Public
  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Mar 13, 2025Mar 13, 2025

• agent_metasploit

  Public
  Agent metasploit

  PowerShell

  •

  Apache License 2.0

  •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

• ostorlab_insecure_ios_app

  Public
  Vulnerable Ios application for Ostolab Security Scanner

  Dart

  •

  Apache License 2.0

  •11•7•0•0•Updated Mar 12, 2025Mar 12, 2025

• py3chrome

  Public
  A Python Package for the Google Chrome Dev Protocol.

  Python

  •

  Other

  •120•0•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_whois_ip

  Public
  Agent responsible for retrieving registry and information of an IP.

  Python

  •

  Apache License 2.0

  •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• ostorlab_azure_devops_extension

  Public
  Ostorlab Azure DevOps extension to complement your CI/CD with Security Testing.

  TypeScript

  •

  MIT License

  •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_inject_asset

  Public
  Agent responsible for injecting an asset into the bus from the runtime.

  agentsecurityostorlab

  Python

  •

  Apache License 2.0

  •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_amass

  Public
  Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Mar 12, 2025Mar 12, 2025

• agent_debug

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025

• agent_all_tlds

  Public
  Injects all domains names of all known TLD from a source domain.

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025