Mon 11 March 2024
This update introduces various improvements to the XSS scanner, the functionality of the open-source CLI, and monitoring rule creation.
🛠️ Platform Improvements
- Restructured the new monitoring rule flow to be more user-friendly and intuitive.
📦 Detection & Knowledge Base
- Added detection for Fortinet FortiOS Out-of-Bound Write SSL VPN Vulnerability.
- Improve XSS Agent to detect PostMessage-based XSS.
🤖 Open Source
- Ship the first version of Nebula Agent for persisting messages locally.
- Added support for primitive arguments of agents in CLI scan run. You can pass arguments using the
--arg
flag, e.g.:
oxo scan run --agent agent/ostorlab/nmap --follow agent/ostorlab/nmap --arg fast_mode:False ip 8.8.8.8
This command will initiate a scan using the Nmap agent with the fast_mode
argument set to False
:
We do newsletters, too
Get the latest news, updates, and product innovations from Ostorlab right in your inbox.