ostif-org / OSTIF
Security Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF
☆31Updated last month
Alternatives and similar repositories for OSTIF:
Users that are interested in OSTIF are comparing it to the libraries listed below
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆32Updated 2 years ago
- cvet is a Python utility for pulling actionable vulnerabilities from cvetrends.com☆39Updated 2 years ago
- Jumpstart multiple WebSocket servers quickly☆31Updated 3 years ago
- ☆55Updated last year
- Melee: Tool to Detect Infections in MySQL Instances☆22Updated last year
- Service that scans your Infrastructure as Code for common vulnerabilities☆48Updated last year
- InfoSec OpenAI Examples☆19Updated last year
- My talks...☆24Updated last month
- This repository contains a mindmap for different techniques for using Censys Search☆13Updated last year
- aws cli pentesting/red team snippets☆32Updated last year
- Run Capture the Flags and Security Trainings with OWASP WrongSecrets☆45Updated this week
- MyOpenVDP is a free web application to install a vulnerability disclosure policy or a vulnerability disclosure program on your assets. (V…☆27Updated 8 months ago
- Jenkins Security Research or Hacking Jenkins ;)☆11Updated 4 months ago
- This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me☆18Updated 8 months ago
- A Smart Log4Shell/Log4j/CVE-2021-44228 Scanner☆14Updated 3 years ago
- ReconPal: Leveraging NLP for Infosec☆56Updated 2 years ago
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆36Updated 6 months ago
- Manage attack surface data on Elasticsearch☆22Updated last year
- ☆31Updated 2 years ago
- ☆57Updated last year
- ☆16Updated 2 years ago
- Static Token And Credential Scanner☆96Updated last year
- CIS Benchmark testing of Windows SIEM configuration☆44Updated last year
- Dependency Combobulator☆93Updated last year
- Blogpost series showcasing interesting cloud - web app security bugs☆47Updated last year
- ☆17Updated 2 years ago
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆26Updated 2 weeks ago
- ☆18Updated 5 months ago
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Updated 3 years ago
- A command-line utility for auditing DNS configuration using Zonemaster API☆30Updated last year