Security Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF
☆35May 12, 2026Updated last week
Alternatives and similar repositories for OSTIF
Users that are interested in OSTIF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penetration Testing & Red Team tools & scripts☆12Sep 22, 2023Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆13Feb 4, 2024Updated 2 years ago
- WebDirScan is a tool for brute-forcing URIs (directories and files) on web servers by taking input directory to scan for files & director…☆11Mar 31, 2023Updated 3 years ago
- Apache Superset Auth Bypass (CVE-2023-27524)☆11May 9, 2023Updated 3 years ago
- Community curated list of templates for the erebus engine to find security vulnerabilities.☆16Jul 10, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A compilation of important commands, files, and tools used in Pentesting☆56Jan 17, 2023Updated 3 years ago
- A Red Teaming tool focused on profiling the target.☆29Jan 10, 2026Updated 4 months ago
- ☆32Mar 21, 2023Updated 3 years ago
- Utility to check the integrity of your DNS managed zones at your cloud service provider☆15Jan 19, 2022Updated 4 years ago
- ☆21Jul 16, 2025Updated 10 months ago
- Tips, Tricks, and Scripts for Linux Post Exploitation☆37Mar 13, 2023Updated 3 years ago
- ☆13Mar 4, 2021Updated 5 years ago
- CIS Benchmark testing of Windows SIEM configuration☆45May 25, 2023Updated 2 years ago
- ☆32Apr 15, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Web Hacking and Red Teaming MindMap☆79Dec 24, 2025Updated 5 months ago
- ☆18Apr 3, 2023Updated 3 years ago
- A fast enumeration tool for publicly exposed Azure Storage blobs.☆119Mar 25, 2023Updated 3 years ago
- Simulate Windows EXE for Malware Research!☆20Sep 4, 2024Updated last year
- Offensive Security OSWE Prep 2022☆79Sep 10, 2022Updated 3 years ago
- Exploits for CVE-2023-27327 and CVE-2023-27328☆15May 9, 2023Updated 3 years ago
- Distributed phishing framework designed to streamline offensive security phishing☆41Feb 16, 2023Updated 3 years ago
- PoC exploit for late August 2018 Task Scheduler ALPC Vulnerability☆23Oct 10, 2019Updated 6 years ago
- EF/CF - Extremely Fast smart Contract Fuzzing☆70Jul 11, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2022-25636 exploit rewritten with pipe primitive☆19Apr 5, 2022Updated 4 years ago
- POC for CLFS CVE-2022-24481☆14May 14, 2023Updated 3 years ago
- Ethical Remote Acces Tool Client and Server for W10 and Linux Persist functionality☆49Feb 12, 2023Updated 3 years ago
- Exploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS (CVE-2023-31497).☆18Oct 30, 2023Updated 2 years ago
- ☆16Apr 21, 2023Updated 3 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆13May 18, 2018Updated 8 years ago
- PoC - Authenticated Remote Code Execution in VMware vCenter Server (Exploit)☆46Jul 16, 2024Updated last year
- CVE-2022-0185 exploit rewritten with pipe primitive☆16Apr 5, 2022Updated 4 years ago
- ☆11Nov 6, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 2 years ago
- My journey and notes on learning Offensive Security from the ground up☆21Dec 22, 2025Updated 5 months ago
- An isolated environment for DNS cache poisoning attack investigation and demonstration.☆10Nov 22, 2020Updated 5 years ago
- Playground for Race Condition attack☆24Mar 18, 2023Updated 3 years ago
- Offensive Security Vault structure for Obsidian☆24Jan 9, 2023Updated 3 years ago
- ExtendedMacro - BurpSuite plugin providing extended macro functionality☆15Jan 13, 2021Updated 5 years ago
- Exploit script for the CFOR vulnerability using Github's GraphQL API☆28Aug 7, 2024Updated last year