EntraGoat

EntraGoat - A Deliberately Vulnerable Entra ID Environment EntraGoat is a deliberately vulnerable Microsoft Entra ID infrastructure for security professionals. Deploy real-world identity misconfigurations and privilege escalation paths in your own tenant, then practice exploiting them in a safe,...

StegoForge

🛡️ StegoForge The ultimate hybrid of steganography, digital forensics, and covert communications. ⚡ Quick Launch Standalone Binaries StegoForge is a complex Python framework, but you shouldn't have to deal with broken environments when doing active forensics. We have compiled zero-dependency,...

wvctf

WebVulnCTF WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way. Through a rewards system, the user must search for a set of flags in the vulnerable application, that correspond to frequent...

Karkinos

Disclaimer This is an OLD project I did in university... all code was improvised as I progressed, and hardly anything was planned. This tool should be used on applications/networks that you have permission to attack only. Any misuse or damage caused will be solely the users’ responsibility. What ...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. from pwn import contextarch = 'i386', os = 'linux' r =...

awesome-bugbounty-tools

Awesome Bug Bounty Tools A curated list of various bug bounty tools Contents Recon Subdomain Enumeration Port Scanning Screenshots Technologies Content Discovery Content Filtering Links Parameters Fuzzing Monitoring Waf Evasion Exploitation Command Injection CORS Misconfiguration CRLF Injection...

ctf-skills

ctf-skills Agent Skills for solving CTF challenges — web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more. Works with any tool that supports the Agent Skills spec, including Claude Code. Installation npx skills add ljagiello/ctf-skills Run with Friday Studio Want...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. 🚩 Challenge Goal You are provided with a vulnerable binary victim that...

CVE-2022-46169

CVE-2022-46169 POC Prueba de concepto / script para CTF que explota CVE-2022-46169 en Cacti, versiones =1.2.22 Este script fue escrito para resolver un desafío CTF. Se basó en los siguientes scripts de ejemplo: tenía dificultades para entender qué hacían realmente estos scripts, así que reescribí...

clair

Clair Note : The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries. Clair is an open source project for the static analysis of vulnerabilities in application containers currently including OCI...

Awesome-CloudSec-Labs

Impresionantes laboratorios de seguridad en la nube Una lista de laboratorios gratuitos de aprendizaje de seguridad nativa de la nube. Incluye CTF, talleres autoalojados, laboratorios de vulnerabilidades guiados y laboratorios de investigación. Ordenados por tecnología y categoría Nombre|...

heappy

🙂 Heappy：一个快乐的堆编辑器 Heappy 是一款基于 gdb/gef 的编辑器，可帮助你在漏洞利用开发过程中处理堆。 该项目应被视为一种教学工具，有助于理解堆在进程生命周期中的演化过程。它的创建是为了简化最常见堆利用技术的学习，并支持你解决与此主题相关的二进制利用 CTF。 主要特性 这是 Heappy 实现的功能： ✅ 获取堆快照并相互比较 ✅ 立即识别堆 bin 的类型和字段 ✅ 通过十进制、十六进制或字符串搜索和编辑堆值 ✅ 借助堆状态的全景视图轻松定位 ✅ 在注释列中记录关于某个单元格的备注 ✅ 享受浅色和深色模式 快速开始 以下说明将帮助你快速安装和运行 Heappy...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

reverse-shell-generator

reverse-shell-generator Hosted Reverse Shell generator with a ton of functionality -- great for CTFs Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Save button to download Payloads from browser. Raw mode to cURL shells to your machine. Button to...

CTFTiny

CTFTiny: Evaluación comparativa ligera de habilidades ofensivas en ciberseguridad de grandes modelos de lenguaje Este es el repositorio oficial de CTFTiny del artículo "Towards Effective Offensive Security LLM Agents: Hyperparameter Tuning, LLM as a Judge, and a Lightweight CTF Benchmark" AAAI'26...

decomp2dbg

decomp2dbg Reverse engineering involves both static decompiler and dynamic debugger analysis, yet we often use these analyses without sharing knowledge between the two. In the case of reversing static binaries, context switching between debugger assembly and the symbols you have reversed in...

CTF-Write-ups

CTF-Write-ups Algunos write-ups de CTF Síguenos en...

autoenum

/ / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB,...