Skip to content

@Ostorlab Ostorlab

Change the repository type filter

All

    Repositories list

    38 repositories

    • benchmarks

      Public
      Ostorlab Pentest Benchmarks
      Kotlin
      •
      Apache License 2.0
      •0•8•0•0•Updated Sep 24, 2025Sep 24, 2025

    • gitlabci

      Public
      This is the source repository to build the docker image to be used within GitLab CI. This image gives you the ability to integrate Ostorlab automonomus security testing for Android and iOS mobile apps to your build process.
      Shell
      •
      Apache License 2.0
      •2•1•0•0•Updated Sep 24, 2025Sep 24, 2025

    • oxo

      Public
      OXO is a security scanning orchestrator for the modern age.
      securityscannersecurity-scannersecurity-tools
      Python
      •
      Apache License 2.0
      •59•558•0•0•Updated Sep 24, 2025Sep 24, 2025

    • ostorlab_actions

      Public
      Ostorlab Github Actions to complement your CI/CD with Security Testing.
      Apache License 2.0
      •1•19•0•0•Updated Sep 23, 2025Sep 23, 2025

    • oxotitan

      Public
      UI of the OXO open-source Vulnerability Scanner.
      vulnerability-scanners
      Vue
      •
      Apache License 2.0
      •0•6•0•0•Updated Sep 23, 2025Sep 23, 2025

    • KB

      Public
      Knowledge Base collects, stores, and retrieves known vulnerabilities.
      securityostorlab
      Python
      •
      Apache License 2.0
      •1•9•0•0•Updated Sep 23, 2025Sep 23, 2025

    • agent_asteroid

      Public
      Agent responsible for detecting remote vulnerabilities, a robust scanner.
      agentsecurityscannerostorlab
      Python
      •
      Apache License 2.0
      •5•33•0•0•Updated Sep 22, 2025Sep 22, 2025

    • KEV

      Public
      Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
      exploitsvulnerability0daycisacisa-kev
      Apache License 2.0
      •41•585•0•0•Updated Sep 22, 2025Sep 22, 2025

    • agent_whatweb

      Public
      Agent responsible for fingerprinting websites.
      securityscannerostorlab
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Sep 22, 2025Sep 22, 2025

    • agent_zap

      Public
      Agent implementation of the Zed Attack Proxy (ZAP) security scanner. ZAP is a very popular web scanner and proxy maintained by the OWASP org.
      Python
      •
      Apache License 2.0
      •2•9•0•0•Updated Jul 31, 2025Jul 31, 2025

    • agent_nmap

      Public
      Agent responsible for network discovery and security auditing using Nmap.
      agentsecurityscannerostorlab
      Python
      •
      Apache License 2.0
      •3•21•0•0•Updated Jul 31, 2025Jul 31, 2025

    • agent_osv

      Public
      OSV Agent to find existing vulnerabilities affecting projects dependencies
      Python
      •
      Apache License 2.0
      •0•4•0•0•Updated Jul 17, 2025Jul 17, 2025

    • agent_nuclei

      Public
      Agent responsible for fast vulnerability scanning using Nuclei.
      agentsecurityscannerostorlab
      Python
      •
      Apache License 2.0
      •2•10•0•0•Updated Jul 3, 2025Jul 3, 2025

    • agent_trufflehog

      Public
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated May 29, 2025May 29, 2025

    • agent_semgrep

      Public
      Python
      •
      Apache License 2.0
      •1•0•0•0•Updated May 13, 2025May 13, 2025

    • ostorlab_insecure_android_app

      Public
      Vulnerable Android application for Ostolab Security Scanner
      Java
      •
      Apache License 2.0
      •17•33•0•0•Updated May 13, 2025May 13, 2025

    • agent_tracker

      Public
      Agent responsible for tracking a scan in the local runtime.
      agentostorlab
      Python
      •
      Apache License 2.0
      •1•3•0•0•Updated Apr 30, 2025Apr 30, 2025

    • agent_local_persist_vulnz

      Public
      Agent responsible for persisting vulnerabilities in the local runtime.
      agentsecurityostorlab
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Apr 30, 2025Apr 30, 2025

    • agent_openvas

      Public
      Agent responsible for network security and vulnerability scanning using OpenVas.
      agentsecurityscannerostorlab
      Shell
      •
      Apache License 2.0
      •3•7•0•0•Updated Mar 14, 2025Mar 14, 2025

    • agent_opengrep

      Public
      Python
      •
      Apache License 2.0
      •1•0•0•0•Updated Mar 13, 2025Mar 13, 2025

    • agent_metasploit

      Public
      Agent metasploit
      PowerShell
      •
      Apache License 2.0
      •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_nebula

      Public
      The Nebula Agent is responsible of persisting all types of messages locally.
      Python
      •
      Apache License 2.0
      •0•1•0•0•Updated Mar 12, 2025Mar 12, 2025

    • ostorlab_insecure_ios_app

      Public
      Vulnerable Ios application for Ostolab Security Scanner
      Dart
      •
      Apache License 2.0
      •11•7•0•0•Updated Mar 12, 2025Mar 12, 2025

    • py3chrome

      Public
      A Python Package for the Google Chrome Dev Protocol.
      Python
      •
      Other
      •120•0•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_whois_ip

      Public
      Agent responsible for retrieving registry and information of an IP.
      Python
      •
      Apache License 2.0
      •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

    • ostorlab_azure_devops_extension

      Public
      Ostorlab Azure DevOps extension to complement your CI/CD with Security Testing.
      TypeScript
      •
      MIT License
      •1•1•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_inject_asset

      Public
      Agent responsible for injecting an asset into the bus from the runtime.
      agentsecurityostorlab
      Python
      •
      Apache License 2.0
      •0•2•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_amass

      Public
      Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
      Python
      •
      Apache License 2.0
      •0•1•0•0•Updated Mar 12, 2025Mar 12, 2025

    • agent_debug

      Public
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025

    • agent_all_tlds

      Public
      Injects all domains names of all known TLD from a source domain.
      Python
      •
      Apache License 2.0
      •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025