Security Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF
☆35Apr 30, 2026Updated this week
Alternatives and similar repositories for OSTIF
Users that are interested in OSTIF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penetration Testing & Red Team tools & scripts☆12Sep 22, 2023Updated 2 years ago
- WebDirScan is a tool for brute-forcing URIs (directories and files) on web servers by taking input directory to scan for files & director…☆11Mar 31, 2023Updated 3 years ago
- Apache Superset Auth Bypass (CVE-2023-27524)☆11May 9, 2023Updated 2 years ago
- Community curated list of templates for the erebus engine to find security vulnerabilities.☆16Jul 10, 2021Updated 4 years ago
- A compilation of important commands, files, and tools used in Pentesting☆56Jan 17, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆32Mar 21, 2023Updated 3 years ago
- ☆21Jul 16, 2025Updated 9 months ago
- Tips, Tricks, and Scripts for Linux Post Exploitation☆37Mar 13, 2023Updated 3 years ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated 10 months ago
- CIS Benchmark testing of Windows SIEM configuration☆45May 25, 2023Updated 2 years ago
- This repository contains examples of information security policies, GDPR protocols and an operational security guide with examples of bes…☆13Apr 21, 2026Updated last week
- Exploits for CVE-2023-27327 and CVE-2023-27328☆14May 9, 2023Updated 2 years ago
- ☆32Apr 15, 2023Updated 3 years ago
- Web Hacking and Red Teaming MindMap☆79Dec 24, 2025Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆18Apr 3, 2023Updated 3 years ago
- Cloud Pentesting Resource Collection☆35Apr 18, 2026Updated 2 weeks ago
- Linux and windows privilege escalation cheatsheet☆11May 18, 2023Updated 2 years ago
- Offensive Security OSWE Prep 2022☆78Sep 10, 2022Updated 3 years ago
- The results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.☆19Jan 20, 2023Updated 3 years ago
- PoC exploit for late August 2018 Task Scheduler ALPC Vulnerability☆24Oct 10, 2019Updated 6 years ago
- 🏠 my dotfiles☆19Oct 18, 2024Updated last year
- EF/CF - Extremely Fast smart Contract Fuzzing☆70Jul 11, 2023Updated 2 years ago
- A streamlit app to query metadata from conda packages☆13Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2022-25636 exploit rewritten with pipe primitive☆20Apr 5, 2022Updated 4 years ago
- An MCP Server for Pwndoc (Pentesting Reporting Tool)☆40Jan 23, 2026Updated 3 months ago
- POC for CLFS CVE-2022-24481☆14May 14, 2023Updated 2 years ago
- Bazel toolchain that is backed by cosmopolitan☆16Feb 5, 2024Updated 2 years ago
- Extract Everything. Decompress entire folders filled with archives.☆24Updated this week
- Exploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS (CVE-2023-31497).☆18Oct 30, 2023Updated 2 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆13May 18, 2018Updated 7 years ago
- PoC - Authenticated Remote Code Execution in VMware vCenter Server (Exploit)☆46Jul 16, 2024Updated last year
- ☆11Nov 6, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- My journey and notes on learning Offensive Security from the ground up☆21Dec 22, 2025Updated 4 months ago
- Build tools for Open-CE☆13Nov 13, 2025Updated 5 months ago
- An isolated environment for DNS cache poisoning attack investigation and demonstration.☆10Nov 22, 2020Updated 5 years ago
- All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps …☆22Aug 6, 2022Updated 3 years ago
- Offensive Security Vault structure for Obsidian☆24Jan 9, 2023Updated 3 years ago
- Exploit script for the CFOR vulnerability using Github's GraphQL API☆28Aug 7, 2024Updated last year
- ☆17Oct 9, 2024Updated last year