CTF-RSA-tool

CTF-RSA-tool factordb http://factordb.com/ Fast Install cd install cd gmp-6.1.2 && make && make check && make install cd mpfr-4.0.1 && make && make check && make install cd mpc-1.1.0 make && make check && make install cd gmpy2-2.1.0a1 && python setup.py buildext --static=$HOME/static install cd...

stego-toolkit

Steganography Toolkit Este proyecto es una imagen Docker útil para resolver desafíos de esteganografía como los que puedes encontrar en plataformas CTF como hackthebox.eu. La imagen viene preinstalada con muchas herramientas populares ver lista abajo y varios scripts de cribado que puedes usar pa...

BoxPwnr

BoxPwnr Un experimento divertido para ver hasta dónde pueden llegar los Modelos de Lenguaje de Gran Escala LLMs por sí solos resolviendo desafíos CTF y laboratorios de seguridad. Comenzó con HackTheBox y ahora abarca muchas plataformas y solucionadores agénticos. BoxPwnr proporciona un sistema...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

Flutter-Reverse-Engineering-Labs

Laboratorios de Ingeniería Inversa de Flutter Este repositorio contiene una serie de retos progresivos diseñados para introducir la ingeniería inversa de aplicaciones Flutter. Dado que no hay muchas publicaciones en blogs o tutoriales que expliquen la reversión de Flutter en detalle, decidí crear...

htb-writeups

Writeups de Hack The Box - El recurso definitivo de HTB La colección más completa de writeups de Hack The Box , guías paso a paso y hojas de referencia en GitHub. Más de 500 máquinas, más de 400 desafíos, ProLabs, Sherlocks DFIR, eventos CTF, metodología de pruebas de penetración y preparación pa...

oasis

OASIS Estándar de Inteligencia de Seguridad Ofensiva con IA — Evaluación comparativa de seguridad con IA de código abierto. Evalúa cómo los modelos de IA realizan tareas de seguridad ofensiva: descubrimiento de vulnerabilidades, explotación, escalada de privilegios y más. Análisis completo con...

mas-crackmes

OWASP MAS Crackmes This repo contains the source code for the OWASP MAS Crackmes. Welcome to the MAS Crackmes aka. UnCrackable Apps, a collection of mobile reverse engineering challenges. These challenges are used as examples throughout the OWASP MASTG. Of course, you can also solve them for fun...

2018-QWB-CTF

2018-QWB-CTF 2018 Qiangwangbei CTF Challenge Collection │ ├── 01Misc-4题 │ ├── 题目名称：ai-nimals │ │ └── 题目名称：ai-nimals.mhtml │ ├── 题目名称：welcome │ │ └── 题目名称：welcome.mhtml │ ├── 题目名称：签到 │ │ └── 题目名称：签到.mhtml │ └── 题目名称：问卷调查 │ └── 题目名称：问卷调查.mhtml ├── 02Crypto-5题 │ ├──...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...

0l4bs

0l4bs Laboratorios de Cross-site scripting para entusiastas de la seguridad de aplicaciones web Lista de Desafíos : Desafío 1 | URL Desafío 2 | Form Desafío 3 | User-Agent Desafío 4 | Referrer Desafío 5 | Cookie Desafío 6 | LocalStorage Desafío 7 | Login Page Desafío 8 | File Upload Desafío 9 |...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

xss_vulnerability_challenges

Escenarios de Vulnerabilidad XSS desafíos Este repositorio es una aplicación PHP Dockerizada que contiene algunos desafíos de vulnerabilidad XSS. Las ideas detrás de los desafíos son: Bypass de validación de JavaScript Bypass de entidades HTML Bypass de WAF Bypass de validación de lista negra...

DFIR-LABS

About DFIR LABS is a compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting. This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DF...

OWASPWebGoatPHP

WebGoatPHP OWASP WebGoatPHP is a port of OWASP WebGoat to PHP and MySQL/SQLite databases. The goal is to create an interactive teaching environment for web application security by offering lessons in the form of challenges. In each challenge the user must exploit the vulnerability to demonstrate...

awesome-ctf-resources

Recursos increíbles de CTF Una lista de Capture The Flag CTF frameworks, librerías, recursos y software para jugadores de CTF principiantes/experimentados 🚩 Cualquier contribución es bienvenida, ¡enviame un PR! ❤️ -El software y los recursos recopilados no me pertenecen y han sido compilados solo...

droidground

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

Awesome-CloudSec-Labs

Awesome Cloud Security Labs A list of free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs. Sorted by Technology and Category Name| Technology| Category| Author| Notes ---|---|---|---|--- The Ultimate Cloud Security...

silicon2022-capturetheflag

silicon2022-ctf About A 41 flag CTF using the RootTheBox platform. Infrastructure was deployed mostly on Azure Kubernetes Service. Terminal challenges were deployed via Docker images using a modified version of WeTTY Build Most challenges are built as Docker images. You can go into the respective...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...