Skip to content

@Ostorlab Ostorlab

Change the repository type filter

All

    Repositories list

    38 repositories

    • agent_asteroid

      Public
      Agent responsible for detecting remote vulnerabilities, a robust scanner.
      agentsecurityscannerostorlab
      Python
      •
      Apache License 2.0
      •5•36•0•0•Updated Dec 18, 2025Dec 18, 2025

    • agent_zap

      Public
      Agent implementation of the Zed Attack Proxy (ZAP) security scanner. ZAP is a very popular web scanner and proxy maintained by the OWASP org.
      Python
      •
      Apache License 2.0
      •2•11•0•0•Updated Dec 17, 2025Dec 17, 2025

    • KB

      Public
      Knowledge Base collects, stores, and retrieves known vulnerabilities.
      securityostorlab
      Python
      •
      Apache License 2.0
      •1•9•0•0•Updated Dec 16, 2025Dec 16, 2025

    • oxo

      Public
      OXO is a security scanning orchestrator for the modern age.
      securityscannersecurity-scannersecurity-tools
      Python
      •
      Apache License 2.0
      •60•559•1•0•Updated Dec 5, 2025Dec 5, 2025

    • oxotitan

      Public
      UI of the OXO open-source Vulnerability Scanner.
      vulnerability-scanners
      Vue
      •
      Apache License 2.0
      •0•6•0•0•Updated Dec 4, 2025Dec 4, 2025

    • agent_whatweb

      Public
      Agent responsible for fingerprinting websites.
      securityscannerostorlab
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Dec 3, 2025Dec 3, 2025

    • benchmarks

      Public
      Ostorlab Pentest Benchmarks
      Kotlin
      •
      Apache License 2.0
      •1•14•0•0•Updated Dec 2, 2025Dec 2, 2025

    • agent_osv

      Public
      OSV Agent to find existing vulnerabilities affecting projects dependencies
      Python
      •
      Apache License 2.0
      •1•4•0•0•Updated Nov 20, 2025Nov 20, 2025

    • ostorlab_azure_devops_extension

      Public
      Ostorlab Azure DevOps extension to complement your CI/CD with Security Testing.
      TypeScript
      •
      MIT License
      •1•2•0•0•Updated Nov 19, 2025Nov 19, 2025

    • agent_nmap

      Public
      Agent responsible for network discovery and security auditing using Nmap.
      agentsecurityscannerostorlab
      Python
      •
      Apache License 2.0
      •3•22•0•0•Updated Oct 31, 2025Oct 31, 2025

    • agent_nuclei

      Public
      Agent responsible for fast vulnerability scanning using Nuclei.
      agentsecurityscannerostorlab
      Python
      •
      Apache License 2.0
      •2•10•1•0•Updated Oct 31, 2025Oct 31, 2025

    • agent_trufflehog

      Public
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Oct 10, 2025Oct 10, 2025

    • KEV

      Public
      Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
      exploitsvulnerability0daycisacisa-kev
      Apache License 2.0
      •44•596•0•0•Updated Oct 10, 2025Oct 10, 2025

    • agent_nebula

      Public
      The Nebula Agent is responsible of persisting all types of messages locally.
      Python
      •
      Apache License 2.0
      •0•1•0•0•Updated Oct 8, 2025Oct 8, 2025

    • ostorlab_actions

      Public
      Ostorlab Github Actions to complement your CI/CD with Security Testing.
      Apache License 2.0
      •1•20•0•0•Updated Oct 2, 2025Oct 2, 2025

    • gitlabci

      Public
      This is the source repository to build the docker image to be used within GitLab CI. This image gives you the ability to integrate Ostorlab automonomus security testing for Android and iOS mobile apps to your build process.
      Shell
      •
      Apache License 2.0
      •2•1•0•0•Updated Sep 24, 2025Sep 24, 2025

    • agent_semgrep

      Public
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated May 13, 2025May 13, 2025

    • ostorlab_insecure_android_app

      Public
      Vulnerable Android application for Ostolab Security Scanner
      Java
      •
      Apache License 2.0
      •17•35•0•0•Updated May 13, 2025May 13, 2025

    • agent_tracker

      Public
      Agent responsible for tracking a scan in the local runtime.
      agentostorlab
      Python
      •
      Apache License 2.0
      •1•3•0•0•Updated Apr 30, 2025Apr 30, 2025

    • agent_local_persist_vulnz

      Public
      Agent responsible for persisting vulnerabilities in the local runtime.
      agentsecurityostorlab
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Apr 30, 2025Apr 30, 2025

    • agent_openvas

      Public
      Agent responsible for network security and vulnerability scanning using OpenVas.
      agentsecurityscannerostorlab
      Shell
      •
      Apache License 2.0
      •3•7•0•0•Updated Mar 14, 2025Mar 14, 2025

    • agent_opengrep

      Public
      Python
      •
      Apache License 2.0
      •1•0•0•0•Updated Mar 13, 2025Mar 13, 2025

    • agent_metasploit

      Public
      Agent metasploit
      PowerShell
      •
      Apache License 2.0
      •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

    • ostorlab_insecure_ios_app

      Public
      Vulnerable Ios application for Ostolab Security Scanner
      Dart
      •
      Apache License 2.0
      •11•7•0•0•Updated Mar 12, 2025Mar 12, 2025

    • py3chrome

      Public
      A Python Package for the Google Chrome Dev Protocol.
      Python
      •
      Other
      •119•0•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_whois_ip

      Public
      Agent responsible for retrieving registry and information of an IP.
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_inject_asset

      Public
      Agent responsible for injecting an asset into the bus from the runtime.
      agentsecurityostorlab
      Python
      •
      Apache License 2.0
      •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_amass

      Public
      Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
      Python
      •
      Apache License 2.0
      •0•1•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_debug

      Public
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025

    • agent_all_tlds

      Public
      Injects all domains names of all known TLD from a source domain.
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025