Security
Security toolset
In-process scanners, defensive assessment tools, and the offensive list.
On this page
Scanners
oluso scan and the agent tools secrets, vuln, and deps read the workspace. They look for private keys, cloud access key ids, live and test payment secrets, database URLs with passwords, and identity numbers such as BVN or NIN. Patterns include concatenated queries, eval, weak password hashes, and open cross-origin settings. Dependency checks cover known-bad releases, floating versions, install hooks, and a missing lockfile.
NDPA and CBN-style checks are evidence in the files, not a legal opinion. The checklists are on Compliance. A saved report exports as JSON, PDF, or SARIF 2.1.0.
Defensive tools
Review, scan, and code mode can call these through security_tool. The agent does not get a free-form shell for them. They run inside the session sandbox.
| Tool | Use |
|---|---|
rg | Search the workspace. |
semgrep | Local rules. |
bandit | Python checks. |
trivy | Filesystem and config scan. |
radare2, r2 | Local disassembly. |
binwalk | Firmware and file carving. |
gdb | Local debugging. |
Offensive tools
These run only in Sentinel offensive mode, only after you confirm one target, and only against that host. The sandbox network is closed until then. Metadata and link-local addresses are refused. Remote-shell flags are refused, including sqlmap remote-shell flags and nc -e. python3 runs a relative .py file in the workspace, not inline code.
| Tool | Use |
|---|---|
nmap | Port and service scan of the authorised host. |
nikto | Web server checks against that host. |
sqlmap | SQL injection checks. Remote-shell flags are refused. |
gobuster, ffuf | Content discovery. |
nc | TCP checks. Exec flags are refused. |
curl, wget | HTTP requests to the authorised host. |
python3 | A workspace script. requests, scapy, and pwntools are installed. |
john, hashcat | Offline password hashes. Hashcat stays on CPU. No GPU is passed in. |
Browser
The browser tool drives headless Chromium in the same sandbox. Actions are open, click, fill, and screenshot. It returns status, title, and visible text, and it opens only the authorised target. Offensive mode is what turns it on.