Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, práctico Un capture-the-flag basado en el OWASP Kubernetes Top Ten — 2025. Te han contratado como red team para NimbusMart , una empresa ficticia de comercio electrónico cuyo clúster creció más rápido que su seguridad. Diez desafíos, uno por cada riesgo de OWASP más ...

CTF-CVE-2022-0847

Dirty Pipe Deployment For this challenge, you want to overwrtie the "cat.txt" read-only file using CVE-2022-0847 exploit There are many way to do it using the exploit Dependencies Linux Kernel Version 5.8 or later vulnerable gcc GNU Compiler Collection for compiling the exploit code First-Time...

llama_facts

Llama Facts This project was originally created for the Rochester Institute of Technology RIT Women in Cybersecurity WIYCS 2022 CTF competition. It is vulnerable to Server-Side Template Injection SSTI, defined in the disputed CVE CVE-2019-8341. Challenge Description Description: A Computer Scienc...

OverRide

OverRide Explora desensamblado, explotación binaria e ingeniería inversa a través de 10 pequeños desafíos. En la carpeta de cada nivel encontrarás: flag - contraseña para el siguiente nivel README.md - cómo encontrar la contraseña source.c - el binario con ingeniería inversa dissasemblynotes.md...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. 🚩 Challenge Goal You are provided with a vulnerable binary victim that...

CTF-CVE-2019-9053-GTFOBins

CTF, CVE-2019-9053, GTFOBins I utilized the machines on https://tryhackme.com/ and my own Kali on WSL to do this exercise and it is part of the CTF challenge. The following information helped me solved the challenge: vim on https://gtfobins.github.io/gtfobins/vim/ and https://gtfobins.github.io/...

traefik-CVE-2024-45410-poc

Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability , i try to make CTF with [email protected] version but when i check...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

CVE-2022-46169

CVE-2022-46169 POC Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions =1.2.22 This script was written to solve a CTF challenge. It was based on the following example scripts - I had difficulty understanding what these scripts actually did, so I re-wrote my own...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

Pwn ARM NFC

Desafío Desbordamiento de búfer en ARM a través de etiqueta NFC Este proyecto es un desafío de bajo nivel de código abierto y divertido de hacer. Siéntete libre de mejorarlo o usarlo en tus propios proyectos. Cada archivo se distribuye "tal cual" con la esperanza de que sea útil, pero sin ninguna...

CTF_CVE-2020-7471

DOBBYISFREE! CTF: 2020 Christmas CTF Category: WEB Keyword: DOBBYISFREE! Difficulty: ★★★☆☆ Background Since web hackers usually study SQL Injection on MySQL, I created this problem using PostgreSQL so that they can experience attacks on various databases. Solution Intended Solution Since the...

ctf-screenshotter

screenshotter web Un desafío web CTF sobre cómo hacer capturas de pantalla. Está inspirado en un error encontrado en la vida real. El desafío fue creado por @LiveOverflow para https://cscg.de/. Mira el video writeup aquí: https://www.youtube.com/watch?v=FCjMoPpOPYI Ejecutar el desafío Para ejecut...

CVE-2025-64459

CTF Challenge: Django ORM Injection CVE-2025-64459 Category: Web Security Difficulty: Medium Vulnerability: CVE-2025-64459 - Django ORM Filter Injection 📝 Description We built a secure merch shop with admin panel. Can you bypass the authentication and find the private admin note URL:...

wargame-turkey_in_2

wargame 1. flag file divide 2. Brute force prevent - delay 50005s 3. logging 4. password hashing -wargame-turkeyin2...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

Next.js-Middleware-Bypass-CVE-2025-29927-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability so Big shout out to zhero & inzo and you can find their blogpost here :...