OXO: Orchestrating Security Scans Like a Pro
summary
OXO is an orchestrator that runs chained scanners, auto-installs missing binaries and shows per-tool progress while storing findings in SQLite and offering a REST API on port 3420. It drives subfinder, nmap, nuclei and even optional tools like metasploit; runs multi-asset scans from YAML, launches scans quickly via CLI or agent groups, and persists results locally or to remote storage. Example runs surface two criticals (remote code execution and injection), plus highs and mediums, so the flow works end to end.
AI-written summary · about
chapters (11)
- 0:00Introduction to OXO
- 1:28Setting up OXO scan
- 3:37Running the scan process
- 6:11Understanding scan results
- 8:21Viewing scan resolutions
- 10:11Analyzing critical findings
- 11:36Security configuration review
- 13:04Adding custom scanners
- 14:30Configuring scan engines
- 15:11Local vs cloud scanning
- 16:38Q&A session
related talks
34mOROCHIFY - An Assist to Product Developers in Manufacturing Industry to Find Vulnerabilities
32mSecOps Automation And Orchestration
36mContinuous Security Testing with OWASP secureCodeBox in Kubernetes
44mSecurity Research with Open Source Software: Vol. Omega
47mRollercoaster of Security Automation
40mBeyond Endpoint Security Using Osquery at Scale
50mScaling Security Assessment at the Speed of DevOps
20mLeveraging Osquery for DFIR at Scale