3 ms·
An open source vuln scanner in Python: OXO
- tomrod 2y agoIs this a ShowHN or just someone's preferred tool? If a tool, what does it have to recommend itself over clamav?
- homarp 2y agoisn't clamAV an AntiVirus? this is a vulnerability scanner for your system, like ZAP or OpenVAS
- tomrod 2y agoAppreciate the correction. I'm coming from a data science background, this is helpful to put in context. So this is like a twistlock/sonarqube?
- homarp 2y agosonarcube inspects your code. these tools poke around your server ports, trying various config/misconfigs, try SQL injections. They act 'blindly', like an attacker would do. https://news.ycombinator.com/item?id=40615177 https://news.ycombinator.com/item?id=40615177 clarifies what the tool does
- deleted 2y ago[deleted]
- AbraKdabra 2y agoI read the docs and I still can't get why I would prefer running this wrapper over running nmap or nuclei directly. Also I wouldn't call this tool a vuln scanner, it's not, it depends on other actual vuln scanners to do the job.
- lijunhao 2y agoYou are correct. It is more like a scanner manager/platform. I am new to this field. Thanks for the correction.
- AbraKdabra 2y agoI'd suggest you invest some time in the docs explaining what advantages it would bring over just using the tools directly as I said, add some concrete examples, that would be the main sell point.
- lijunhao 2y agoI think your are right. But oxo is not my project. I am recently curious about vuln and related tools ( I want to add some opensource vuln tools in my project ). I found oxo and share it in hackernews. I am developing x-cmd in recently three years. And this is the demo of using google's OSV scanner in x-cmd: https://www.x-cmd.com/mod/osv https://www.x-cmd.com/mod/osv Welcome to our website. To be honeset, I'm a bit stuck on how to approach the project promotion. While your advice is tailored for oxo, I'd still like to consider it and see if any aspects could be applicable to my situation.