br0w

br0w Hack The Br0w | Play your browser and learn more, hack fun !! The Br0w is a simple web to learn about and about web security with a browser as a tool that sometimes people forget about more benefits. Maybe it's more like Capture The Flag CTF. One of the challenges is, disable css and base64...

DVAP

DVAP - Damn Vulnerable AI Platform Train. Break. Defend. AI Systems. An open-source platform for AI security training, red/blue teaming, CTF, benchmarking, and research. Runs 100% locally. No cloud, no paid APIs, no data leaves your machine. Prerequisites Docker 24+ and Docker Compose v2 16 GB RA...

CTF-s-Tools

Repository to index interesting Capture The Flag tools and other stuff. Table of Contents Platforms to practice Cryptography Main Secondary Hashes Esoteric Languages Steganography OSINT Threat Hunting Forensics Reversing Exploiting Pentesting Recon Web Exploit Database Docker Credentials CVE...

capture-the-flag

Capture The Flag! Remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit. Requirements You will need the following in order to build the Live CD using the scripts in this project: Linux, with root access using sudo gi...

CTF-RSA-tool

CTF-RSA-tool factordb http://factordb.com/ Fast Install cd install cd gmp-6.1.2 && make && make check && make install cd mpfr-4.0.1 && make && make check && make install cd mpc-1.1.0 make && make check && make install cd gmpy2-2.1.0a1 && python setup.py buildext --static=$HOME/static install cd...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

CVE-2023-0386-CTF

This repository does not have a README...

OverRide

OverRide Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges. In the folder for each level you will find: flag - password for next level README.md - how to find password source.c - the reverse engineered binary dissasemblynotes.md - notes on asm See the...

CTF-Write-ups

CTF-Write-ups Some CTF Write-ups Follow us on...

CTF-Writeups

This repository does not have a README...

HTTPUploadExfil

HTTPUploadExfil HTTPUploadExfil is a very simple HTTP server written in Go that's useful for getting files and other information off a machine using HTTP. While there are many use-cases, it's meant to be used in low-stakes offensive scenarios e.g., CTFs. Think of this as python3 -m http.server bu...

LiveCTF-DEFCON30

LiveCTF 2022 Repository for storing challenges, infrastructure notes, streaming configuration and other version controlled bits of information for the DEF CON CTF final LiveCTF event. Challenges used in LiveCTF | Challenge Name| Competitors| Victor ---|---|---|--- Round of 16: 1| syscall-me-maybe...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

uoftctf-2025-chals-public

University of Toronto Capture the Flag Competition 2025 This repository contains the solutions to challenges during UofTCTF 2025. The source is also included in most of the challenge directories. Challenges Challenge Name| Solve Count| Category ---|---|--- Funny Cipher| 231/1510| Crypto Enchanted...

Next.js-Middleware-Bypass-CVE-2025-29927-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability so Big shout out to zhero & inzo and you can find their blogpost here :...

security-writeups

Security Writeups Lab write-ups from self-directed work, mostly TryHackMe, plus a PortSwigger SQLi practical. The reasoning lives on the site — the full methodology, the payloads, the parts where I went wrong first — and this repo is the index and the scripts. Nine rooms, and they are not nine...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

INT14107_CVE-2021-35042

CTF Blog Project This project is a Blog system specialized in CTF Capture The Flag built with Django. Features Post articles, comments. Manage User, Category. Integrated security testing tool exploitdump.py. Installation Guide 1. Install Python: pip install -r requirements.txt 2. Initialize...

FFTStegPic

FFTStegPic A python script for digital image steganography using Fast Fourier Transform. May be useful for some steganography CTF challenges...

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest CTF Box — Multi-Stage Exploitation VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...