oasm-platform

How to run security tools on the conversation's worker — built-in tools with execute_remote_command, connector tools with run_tool...

Perform deep analysis of CVEs and security vulnerabilities including CVSS scoring, affected versions, exploit maturity, and remedi...

Perform web research using CVE databases, security advisories, and threat intelligence sources. Use when the user asks about CVEs,...

Drive a real headless browser on the conversation's worker with `execute_remote_command` and `browser ...` commands. Covers JavaSc...

Methodology for safely confirming a suspected vulnerability with a minimal, non-destructive proof and capturing reproducible evide...

Methodology for authorized, non-destructive assessment of exposed non-web network services — TLS/SSL posture, SSH, mail, databases...

Methodology for authorized reconnaissance and attack-surface mapping of targets — subdomains, live hosts, ports, technologies and ...

OWASP-aligned methodology for authorized, non-destructive web application security testing — auth, access control, injection, SSRF...