566 matches found
Malicious Package
Overview my-ctf-helper-script-9921 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in my-ctf-helper-script-9921 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ee1dafe6dce8750ac695c9d13e13c2808e2f35d94bbbcc41a4444a02541409 On require/import, the package's main module executes a top-level fetch to the hardcoded collector URL...
MAL-2026-16365 Malicious code in my-ctf-helper-script-9921 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ee1dafe6dce8750ac695c9d13e13c2808e2f35d94bbbcc41a4444a02541409 On require/import, the package's main module executes a top-level fetch to the hardcoded collector URL...
owasp-ctf
OWASP CTF セキュリティ学習イベントのためのセルフホスト型コントロールプレーン — 1 台のマシン、1 つの無料 GitHub org で完結。 大学、高校、OWASP チャプター、ミートアップで運用できます。 キットでの作業 人間とエージェント コードを書く前に AGENTS.md を読んでください。これは運用マニュアルであり、 CI が実行する正確なコマンド、このリポジトリがすでに遭遇した障害モード、 そして docs/reviewing.md にあるレビュー不変条件が記載されています。 CLAUDE.md は同じファイルへのポインタです。 変更が準備完了となるのは、CI...
owasp-web-security-notes
🛡️ OWASP Web Security Notes A hand-written, exploitation-dep...
AgentLSD: Evaluating AI Security Agents under Adversarial Task Contamination
AI agents for security inspect web pages, source code, logs, configuration files, and command outputs. These environments may contain deceptive artifacts that influence the agent's behavior. We call this adversarial task contamination. Whereas prompt injection relies on attacker-supplied...
ctf-tracker
⚡ ZEROBOX // 戦術的CTFトラッカー v2.0 高度なCTFマシントラッキング、攻撃ライフサイクル管理＆攻撃的チートシートダッシュボード 929台のマシン（HTB退役415台＋THM CTF 514台）・Daniel Dayanの検証済み55ソルブ・HTB＆THM ToSに100%準拠 ⭐️ ZeroBoxが役に立ったなら、GitHubでスターを付けていただけると幸いです！継続的な開発とコミュニティ機能のサポートにつながります。 ⭐️ 🎯 概要 ZeroBox は、Hack The Box HTB 、TryHackMe THM...
the-few-chosen-ctf-2026
The Few Chosen CTF 2026 — Writeups Solutions, exploits, and w...
nns-ctf-php-is-my-passion
Competition Introduction NNS CTF is a jeopardy styled CTF comp...
oss-oopssec-store v2.20.0
OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...
droidground v1.0.15
DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...
offensive-security-writeups
Offensive Security Write-ups from the CTF challenges tackled...
DEFCON-UoA-students-competition
!Review Assignment Due Datehttps://classroom.github.com/asse...
Staying on the Attack Path: Structured State for Long-Horizon Automated Penetration Testing
Large language model LLM based agents are increasingly applied to cybersecurity tasks such as vulnerability discovery and automated penetration testing. On long-horizon security tasks, however, such agents remain limited by context forgetting and intent drift: early critical facts and causal...
BUUCTF-Web-Writeups
BUUCTF-Web-Writeups A collection of CTF Web challenges writ...
compfest-ctf-2026
COMPFEST CTF 2026 — Writeups & Solutions Solutions, exploits,...
multi-juicer v10.3.1
Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...
wrongsecrets-binaries v0.3.0
wrongsecrets-binaries This is a supportive repository for OWASP WrongSecrets. Here we create our binaries which are included in the official project. Want to add a challenge related to secrets hiding in binary? Open a ticket at WrongSecrets issues. Want to fix something you found in one of the...