Skip to content

Agent responsible for detecting high severity vulnerabilities with high confidence using Tsunami.

License

Notifications You must be signed in to change notification settings

Ostorlab/agent_tsunami

Repository files navigation

Agent Tsunami

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.


agent-tsunami

This repository is an implementation of OXO Agent for the Tsunami Scanner by Google.

Getting Started

To perform your first scan, simply run the following command.

oxo scan run --install --agent agent/ostorlab/tsunami ip 8.8.8.8

This command will download and install agent/ostorlab/tsunami and target the ip 8.8.8.8. For more information, please refer to the OXO Documentation

Usage

Agent Tsunami can be installed directly from the oxo agent store or built from this repository.

Install directly from oxo agent store

oxo agent install agent/ostorlab/tsunami

You can then run the agent with the following command:

oxo scan run --agent agent/ostorlab/tsunami ip 8.8.8.8

Build directly from the repository

  1. To build the tsunami agent you need to have oxo installed in your machine. if you have already installed oxo, you can skip this step.
pip3 install ostorlab
  1. Clone this repository.
git clone https://github.com/Ostorlab/agent_tsunami.git && cd agent_tsunami
  1. Build the agent image using oxo cli.
oxo agent build --file=ostorlab.yaml

You can pass the optional flag --organization to specify your organisation. The organization is empty by default.

  1. Run the agent using on of the following commands:
    • If you did not specify an organization when building the image:
    oxo scan run --agent agent//tsunami ip 8.8.8.8
    • If you specified an organization when building the image:
    oxo scan run --agent agent/[ORGANIZATION]/tsunami ip 8.8.8.8

License

Apache-2