CBOM Scanner

v1.4.0CycloneDX CBOM community (CipherIQ / OQS Scanner alike)

Probes TLS, SSH, certificates, crypto libraries and hard-coded keys across the estate, grades each against quantum risk, CNSA 2.0 and NIST IR 8547, flags harvest-now-decrypt-later exposure and writes a CycloneDX 1.6 cryptographic bill of materials.

Category: Standards, guidance & secure-development tooling
Package: cbom-scan
Runs on: Linux · Windows
Commands: cbom-scan

Reads the lab's authored crypto posture for each simulated machine. Nothing on a real network is probed.

Install it

The scripts below install the real CycloneDX CBOM community (CipherIQ / OQS Scanner alike) package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)

install-cbom-scan.sh

Windows installer (PowerShell)

Install-cbom-scan.ps1

On a range machine

Add it to your kit and every machine you launch comes with it.

On Linux

Debian, Ubuntu, Kali (apt)

Refresh the package lists
```
sudo apt update
```
Install CBOM Scanner
```
sudo apt install -y cbom-scan
```

RHEL, Fedora (dnf)

Install CBOM Scanner
```
sudo dnf install -y cbom-scan
```
Package names drift between distributions; search first if this one misses.

Arch (pacman)

Install CBOM Scanner
```
sudo pacman -S --noconfirm cbom-scan
```

Alpine (apk)

Install CBOM Scanner
```
sudo apk add cbom-scan
```
Package names drift between distributions; search first if this one misses.

Check it worked

Confirm it landed on PATH
```
which cbom-scan
```
Check the version
```
cbom-scan --version
```
The range reports 1.4.0.

Remove it

Take it off again
```
sudo apt remove --purge cbom-scan
```

On Windows

Windows Package Manager (winget)

Search the catalog
```
winget search cbom-scan
```
Install CBOM Scanner
```
winget install --id cbom-scan -e
```
Package names drift between distributions; search first if this one misses.

Chocolatey (choco)

Install CBOM Scanner
```
choco install cbom-scan -y
```
Run the shell as administrator.

Check it worked

Confirm it resolves
```
where cbom-scan
```
Check the version
```
cbom-scan --version
```
The range reports 1.4.0.

Remove it

Take it off again
```
winget uninstall --id cbom-scan
```

Inside the range

Tick it on the launch screen
Under CBOM Scanner's category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.
Or install it from a range terminal
```
sudo apt install -y cbom-scan
```
The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.
Everything here is simulated
No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use CBOM Scanner

No lab locks this one on yet — tick it on the launch screen and take it into any scenario.