Ctf Open Source Projects

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

:star2: Wiki of OI / ICPC for everyone. （某大型游戏线上攻略，内含炫酷算术魔法）

A collection of hacking / penetration testing resources to make you better!

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

CTF framework and exploit development library

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A curated list of CTF frameworks, libraries, resources and softwares

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Come and join us, we need you!

A powerful and user-friendly binary analysis platform!

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

CTFs as you need them

Platform to host Capture the Flag competitions

Monitor linux processes without root permissions

Course materials for Modern Binary Exploitation by RPISEC

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Google CTF

CTF竞赛权威指南

【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Git All the Payloads! A collection of web attack payloads.

Awesome hacking is an awesome collection of hacking tools.

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Automatic SSRF fuzzer and exploitation tool

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Fully featured and community-driven hacking environment

Web CTF CheatSheet 🐈

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

Collection of CTF Web challenges I made

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

The best tool for finding one gadget RCE in libc.so.6

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

网络安全类公众号推荐，欢迎大家推荐

Venom - A Multi-hop Proxy for Penetration Testers

Wiki-like CTF write-ups repository, maintained by the community. 2017

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.

OFRAK: unpack, modify, and repack binaries.

Writeups for HacktheBox 'boot2root' machines

跨平台密码学工具箱。包含编解码，编码转换，加解密， 哈希，MAC，签名，大数运算，压缩，二维码功能，CTF等功能。

Wiki-like CTF write-ups repository, maintained by the community. 2015

Penelope Shell Handler

Educational, CTF-styled labs for individuals interested in Memory Forensics

Build a database of libc offsets to simplify exploitation

Wiki-like CTF write-ups repository, maintained by the community. 2014

Ctf solutions from p4 team

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.

A general collection of information, tools, and tips regarding CTFs and similar security competitions

Tool to bypass 40X response codes.

PHP代码审计分段讲解

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Interactive CTF Exploration Tool

各种安全相关思维导图整理收集。渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，数据安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

:hammer: A modern, cross-platform machine manager