DVAP

DVAP - Damn Vulnerable AI Platform Train. Break. Defend. AI Systems. An open-source platform for AI security training, red/blue teaming, CTF, benchmarking, and research. Runs 100% locally. No cloud, no paid APIs, no data leaves your machine. Prerequisites Docker 24+ and Docker Compose v2 16 GB RA...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

stego-toolkit

Steganography Toolkit This project is a Docker image useful for solving Steganography challenges as those you can find at CTF platforms like hackthebox.eu. The image comes pre-installed with many popular tools see list below and several screening scripts you can use check simple things for...

Cybersecurity-Mastery-Roadmap

🛡️ Ultimate Cybersecurity Mastery Roadmap A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance 📋 Table of Contents Introduction How to Use This Roadmap Roadmap Overview Foundation Phase Technical Skills Phas...

br0w

br0w Hack The Br0w | Play your browser and learn more, hack fun !! The Br0w is a simple web to learn about and about web security with a browser as a tool that sometimes people forget about more benefits. Maybe it's more like Capture The Flag CTF. One of the challenges is, disable css and base64...

multi-juicer

Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...

BoxPwnr

BoxPwnr A fun experiment to see how far Large Language Models LLMs can go in solving CTF challenges and security labs on their own. It started with HackTheBox and now covers many platforms and agentic solvers. BoxPwnr provides a plug and play system that can be used to test performance of differe...

ParsingPeas

ParsingPeas 🥒 Automated PEASS collection + a clean, portable HTML report for CTF & lab privilege-escalation work. Run one command on the target. ParsingPeas pulls LinPEAS/WinPEAS from your Kali host, runs the scan, ships the output back, and turns it into a single self-contained HTML report you c...

Zero-Day-Legacy

🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...

CTFCrackTools

CTFCrackTools X Next-Generation Node-Based CTF Toolkit English | 简体中文 From V4 to X — More Than Just a Version Number Download | Features | Author's Note Brand Evolution CTFCrackTools X represents the next generation of CTFCrackTools. The "X" stands for: eXtreme — Ultimate performance and experien...

CheatSheetHost

CheatSheetHost A lightweight, content-driven web server for hosting interactive cheatsheets and reference materials. Perfect for CTF Capture The Flag challenges, reverse engineering, and technical documentation. This is best used in labs where you want to limit or forgo external traffic while sti...

spoilerwall

Beware! Spoilers ahead! Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports! Firewall? How about Fire'em'all! Stop spending thousand of dollars on big teams that you don't need! Just fire up the Spoilers Server and...

crypto_identifier

crypto-identifier Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionary Supported Algorithms : AES ARC2 ARC4 Blowfish CAST DES DES3 XOR Supported modes : ECB CBC CFB OFB Usage:...

ctf-party

ctf-party What it is A CLI tool & library to enhance and speed up script/exploit writing for CTF players or security researchers, bug bounty hunters, pentesters but mostly focused on CTF by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the...

ctf

CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

bento

This software is exprimental but we accept suggestions and contributions Bento Toolkit for PT and CTF A bento 弁当, bentō is a single-portion take-out or home-packed meal of Japanese origin. Bento Toolkit is a simple and minimal docker container for penetration testers and CTF players. It has the...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...