droidground

DroidGround Website | Demo En los desafíos CTF tradicionales, es común ocultar flags en archivos dentro de un sistema, lo que obliga a los atacantes a explotar vulnerabilidades para recuperarlas. Sin embargo, en el mundo de Android, este enfoque no funciona bien. Los archivos APK son fácilmente...

br0w

br0w Hack The Br0w | Juega con tu navegador y aprende más, ¡hackea divertido!! Br0w es una web sencilla para aprender sobre seguridad web usando el navegador como herramienta que a veces la gente olvida sus mayores beneficios. Quizás es más como un Capture The Flag CTF. Uno de los desafíos es...

oss-oopssec-store

OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...

multi-juicer

Realizar CTF y entrenamientos de seguridad con OWASP Juice Shop suele ser bastante complicado, ya que Juice Shop no está diseñado para ser usado por múltiples usuarios al mismo tiempo. Instruir a todos para que inicien Juice Shop en su propia máquina funciona, pero consume demasiado tiempo valios...

haaukins

Haaukins Haaukins es una plataforma de virtualización altamente accesible y automatizada para la educación en seguridad. Tiene tres componentes principales Docker, Virtualbox y Golang. La comunicación y orquestación entre los componentes se gestiona mediante el lenguaje de programación Go. La raz...

multi-juicer v10.3.1

Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...

PT-2026-82229

Name of the Vulnerable Software and Affected Versions CTFd version 3.7.6 Description CTFd is susceptible to a man-in-the-middle attack, which occurs when an attacker intercepts and potentially alters communication between two parties who believe they are communicating directly with each other...

CVE-2025-29419

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...

multi-juicer v10.3.0

Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...

oss-oopssec-store v2.18.0

OSS - OopsSec Store An intentionally vulnerable e-commerce app for learning web security. Master real-world attack vectors through a realistic CTF platform. Hunt for flags, exploit vulnerabilities, and level up your security skills. Docker Hub · npm · Roadmap · Walkthroughs · Contributing · Good...

droidground v1.0.12

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

darkmarket-vuln-lab

🕶️ Dark Market Simulator An intentionally vulnerable CTF-...

CVE-2025-59932

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the...

CVE-2025-59833

Flag Forge is a Capture The Flag CTF platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hints in plaintext within the question object, regardless of whether the user has unlocked them via point deduction. Users can view all hints for free,...

GZ::CTF 安全漏洞

GZ::CTF is an open source CTF platform based on ASP.NET Core by GZTime Individual Developers. A security vulnerability exists in GZ::CTF versions prior to 0.20.1, which originates from a cross-site scripting attack that can be performed by an unprivileged user on other users by constructing a...

Hack Battle at 'The Hacker Conference 2013' with CTF365

The Hacker Conference partnered up with CTF365 to provide the best CTF experience during the conference. While trying to find out more about their product and also about their CTF surprise, I got an interview with Marius Corici Co-founder and CEO for CTF365. Q: November 2012 was when you first...