awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
boostsecurityio avatar

boostsecurityio/lotp

0
View on GitHub↗

Lotp

The idea of the LOTP project is to inventory how development tools (typically CLIs), commonly used in CI/CD pipelines, have lesser-known RCE-By-Design features ("foot guns"), or more generally, can be used to achieve arbitrary code execution by running on untrusted code changes or following a…

Features

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
  • Post Exploitation - Inventories development tools with inherent remote code execution capabilities.
157 stars·14 forks·HTML·Apache-2.0·12 views

Star history

Star history chart for boostsecurityio/lotpStar history chart for boostsecurityio/lotp

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Projects sharing features with Lotp

These projects share indexed features with Lotp. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • ridter/intranet_penetration_tipsRidter avatar

    Ridter/Intranet_Penetration_Tips

    4,606View on GitHub↗

    This project is a technical guide and reference for internal network penetration testing. It serves as a collection of procedures for exploiting and navigating private corporate networks during security assessments. The repository provides specialized manuals and cheat sheets focused on active directory attacks, lateral movement, and privilege escalation. It includes a post-exploitation playbook for maintaining system persistence and clearing forensic traces. The documentation covers a broad range of security capabilities, including initial access, network pivoting and tunneling, and interna

    View on GitHub↗4,606
  • almondoffsec/passthecertAlmondOffSec avatar

    AlmondOffSec/PassTheCert

    786View on GitHub↗

    Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

    Python
    View on GitHub↗786
  • aniqfakhrul/powerview.pyaniqfakhrul avatar

    aniqfakhrul/powerview.py

    1,009View on GitHub↗

    Powerview on steroids

    Python
    View on GitHub↗1,009
  • ajm4n/adpeasajm4n avatar

    ajm4n/adPEAS

    179View on GitHub↗

    winPEAS, but for Active Directory

    Python
    View on GitHub↗179
Compare all 30 related projects→

Frequently asked questions

What does boostsecurityio/lotp do?

The idea of the LOTP project is to inventory how development tools (typically CLIs), commonly used in CI/CD pipelines, have lesser-known RCE-By-Design features ("foot guns"), or more generally, can be used to achieve arbitrary code execution by running on untrusted code changes or following a…

What are the main features of boostsecurityio/lotp?

The main features of boostsecurityio/lotp are: Post Exploitation.

Which projects share features with boostsecurityio/lotp?

Projects with overlapping indexed features include: ridter/intranet_penetration_tips — This project is a technical guide and reference for internal network penetration testing. It serves as a collection of… almondoffsec/passthecert — Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel. aniqfakhrul/powerview.py — Powerview on steroids. antoniococo/runascs — RunasCs - Csharp and open version of windows builtin runas.exe. bc-security/moriarty — Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for… ajm4n/adpeas — winPEAS, but for Active Directory.