laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

Cybersecurity-Mastery-Roadmap

🛡️ Ultimate Cybersecurity Mastery Roadmap A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance 📋 Table of Contents Introduction How to Use This Roadmap Roadmap Overview Foundation Phase Technical Skills Phas...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

clair

Clair Note : The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries. Clair is an open source project for the static analysis of vulnerabilities in application containers currently including OCI...

CTF

CTF A collection of challenges from various competitions...

CTF-All-In-One

CTF-All-In-One "The Definitive Guide to CTF Competitions" Series The Definitive Guide to CTF Competitions Pwn Edition This book "The Definitive Guide to CTF Competitions Pwn Edition" written by Yang Chao, reviewed by Wu Shi of the eee team is now available!!! Buy on JD.com Buy on Dangdang This bo...

scoringengine

Scoring Engine Scoring Engine es una plataforma de código abierto para ejecutar competiciones de ciberseguridad de equipos Rojo/Blanco/Azul. Automatiza las comprobaciones de servicios en cada ronda y proporciona un marcador basado en web y una interfaz de configuración. Características Programaci...

laforge

Laforge Marco de automatización de infraestructura para competiciones de seguridad Laforge permite el desarrollo rápido de infraestructura para competiciones de seguridad informática. Mediante un lenguaje de configuración simple e intuitivo, Laforge gestiona un grafo de dependencias y el estado d...

CTFd v3.8.7

What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Features Create your own challenges, categories, hints, and flags from the Admin Interface Dynamic...

autotrain-advanced (>=0.6.52, <=0.6.80), bicleaner-ai (>=3.0.1, <=3.2.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.36.1)

transformers PYPI version 4.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.52, =3.0.1, =0.1.4, =0.0.2, =0.0.12 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

Measuring LLMs’ Ability to Perform Cryptanalysis

There's new benchmark measuring AI's ability to perform mathematical cryptanalysis. Anthropic's frontier model actually found new attacks. The benchmark: "CryptanalysisBench: Can LLMs do Cryptanalysis?" The idea is to benchmark the ability of LLMs to discover new mathematical cryptanalytic attack...

The Disruptive Impact of Large Language Models on Capture the Flag Competitions and the Path toward Fair Play

Capture the Flag CTF competitions are among cybersecurity's most effective training grounds, developing practical skill across cryptography, web exploitation, and binary exploitation. Large language models LLMs can now solve a growing share of challenges with minimal human input, raising urgent...

autotrain-advanced (>=0.6.42, <=0.7.63), ckanext-unfold (>=1.0.0, <=1.1.6) +4 more potentially affected by CVE-2026-55195 via py7zr (0.20.6)

py7zr PYPI version 0.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - autotrain-advanced =0.6.42, =1.0.0, =0.1.4, =0.2.0, =0.9.22, =1.0.3, =1.0.4 Source cves: CVE-2026-55195 Source advisory: OSV:PYSEC-2026-2972...

autotrain-advanced (>=0.6.42, <=0.7.63), ckanext-unfold (>=1.0.0, <=1.1.6) +4 more potentially affected by CVE-2026-55206 via py7zr (0.20.6)

py7zr PYPI version 0.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - autotrain-advanced =0.6.42, =1.0.0, =0.1.4, =0.2.0, =0.9.22, =1.0.3, =1.0.4 Source cves: CVE-2026-55206 Source advisory: OSV:PYSEC-2026-2973...

autotrain-advanced (>=0.6.42, <=0.7.63), ckanext-unfold (>=1.0.0, <=1.1.6) +4 more potentially affected by CVE-2026-23879 via py7zr (0.20.6)

py7zr PYPI version 0.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - autotrain-advanced =0.6.42, =1.0.0, =0.1.4, =0.2.0, =0.9.22, =1.0.3, =1.0.4 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...

Cybersecurity-Challenges-Exploits

Cybersecurity Challenges & Exploits A curated collection of c...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2024-8966 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2024-8966 Source advisory: OSV:PYSEC-2026-1410...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2024-12217 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-49119 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-49119 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...