An open source vuln scanner in Python: OXO

oxo.ostorlab.co

36 points·lijunhao··8 comments

I read the docs and I still can't get why I would prefer running this wrapper over running nmap or nuclei directly.

Also I wouldn't call this tool a vuln scanner, it's not, it depends on other actual vuln scanners to do the job.

You are correct. It is more like a scanner manager/platform. I am new to this field. Thanks for the correction.

I'd suggest you invest some time in the docs explaining what advantages it would bring over just using the tools directly as I said, add some concrete examples, that would be the main sell point.

I think your are right. But oxo is not my project. I am recently curious about vuln and related tools ( I want to add some opensource vuln tools in my project ). I found oxo and share it in hackernews.

I am developing x-cmd in recently three years. And this is the demo of using google's OSV scanner in x-cmd: https://www.x-cmd.com/mod/osv

Welcome to our website.

To be honeset, I'm a bit stuck on how to approach the project promotion. While your advice is tailored for oxo, I'd still like to consider it and see if any aspects could be applicable to my situation.

Is this a ShowHN or just someone's preferred tool? If a tool, what does it have to recommend itself over clamav?

isn't clamAV an AntiVirus?

this is a vulnerability scanner for your system, like ZAP or OpenVAS

Appreciate the correction. I'm coming from a data science background, this is helpful to put in context. So this is like a twistlock/sonarqube?

sonarcube inspects your code.

these tools poke around your server ports, trying various config/misconfigs, try SQL injections. They act 'blindly', like an attacker would do.

https://news.ycombinator.com/item?id=40615177 clarifies what the tool does

Reply on news.ycombinator.com