149 matches found
capture-the-flag
Capture The Flag! Remasteriza imágenes de Live CD de Linux con el propósito de crear wargames de seguridad listos para usar con vulnerabilidades preinstaladas para explotar. Requisitos Necesitarás lo siguiente para construir el Live CD con los scripts de este proyecto: Linux, con acceso root...
ctf-party
ctf-party Qué es Una herramienta CLI y biblioteca para mejorar y acelerar la escritura de scripts/exploits para jugadores de CTF o investigadores de seguridad, cazadores de recompensas, pentesters, pero principalmente enfocado en CTF parcheando la clase String para agregar una sintaxis corta de...
page_table_walk
Captura la Bandera en Memoria Física Has leído sobre paginación. Los diagramas tienen sentido. Cuatro niveles, 9 bits cada uno, marco de página, desplazamiento. Claro. Pero luego te encuentras con un desafío que requiere caminar realmente las tablas de páginas, y te das cuenta de que no lo sabes...
CTFd
What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Features Create your own challenges, categories, hints, and flags from the Admin Interface Dynamic...
caronte
caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...
cicd-goat
Entorno CI/CD deliberadamente vulnerable. Hackea pipelines CI/CD, captura las banderas. 🚩 Creado por Cider Security Adquirida por Palo Alto Networks. Tabla de Contenidos Descripción Descargar y ejecutar Linux y Mac Windows Powershell Uso Instrucciones Acepta el desafío Solución de problemas...
CVE-2021-4034-Capture-the-flag
CVE-2021-4034-Capture-the-flag Demostración en vídeo de Capture the Flag: https://www.youtube.com/watch?v=1N3x23X4FMk&t=103s...
CVE-2025-55182-React2Shell-Lab
CyberSec Blog CTF - React2Shell PoC Este repositorio proporciona un entorno CTF Capture The Flag vulnerable basado en un blog de ciberseguridad que utiliza Next.js y React Server Components. CVE-2025-55182 : Vulnerabilidad de ejecución remota de código RCE preautenticación en React Server...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Anthropic on Thursday became the latest artificial intelligence AI company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing without its knowledge. The AI firm said the...
Mr-Robot-CTF-Automation-Scripts
No d...
Malicious code in ect-472839-ctf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67248cb7373817da18e0edf4a019e2e6c9ded239e93a2e477ac168f7f45eeaa package.json declares a preinstall hook "preinstall": "node index.js" that auto-executes on npm install. index.js issues an HTTP GET to the hardcoded...
Kernel-Exploit-Dojo-499
Kernel-Exploit-Dojo-499 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-283
Kernel-Exploit-Dojo-283 CTF kernel exploitation notes, PoCs,...
MAL-2026-5096 Malicious code in cscc-glass-house (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 20f53888d08d0aa70146b50e8dc761373490363f9081ea0adb9fb93cfd2b6240 Package implements exfiltrating credentials from cloud environments to a hardcoded location. Some code parts suggest it may be part of a CTF. --- Category:...
GodSearch
GodSearch v20.0 — THE SOVEREIGN 💀 Universal Exploit Sear...
Metasploitable3-pentest-lab
🛡️ Metasploitable3 — Home Lab Penetration Test Report Aut...
Exploit for CVE-2026-42945
CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone ex...