710 Open source projects that are alternatives of or similar to Ctf

Challenges of CTF Attack with Defense mode

😎 Curated list about cryptocurrency security (reverse / exploit / fuzz..)

A general purpose memory allocator that implements an isolation security strategy to mitigate memory safety issues while maintaining good performance

Transcribed video lessons of HackerOne to pdf's

Things we learned from Capture The Flag hacking competitions we participated in.

CVE-2019-1458 Windows LPE Exploit

pwninit - automate starting binary exploit challenges

Automatic SSRF fuzzer and exploitation tool

Scoreboard for Capture The Flag competitions.

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

Research on Anti-malware and other related security solutions

DEFCON CTF 2017 Stuff of Shit by HITCON

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Script to setup pwn environment for CTF with Docker

PoC exploit for CVE-2016-4622

Unsorted, raw, ugly & probably poorly usable tools for reversing, exploit and pentest

TCP flow analyzer with sugar for A/D CTF

Source code, writeups and exps in LCTF2017.

Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity

PoC exploit for arbitrary file read/write in locked Samsung Android device via MTP (SVE-2017-10086)

🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

Reverse Shell as a Service

PS4 5.01 WebKit Exploit PoC

Pop shells like a master.

A social experiment

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

Hide your payload into .jpg file

A UITableView extension that enables cell insertion from the bottom of a table view.

Advanced vulnerability scanning with Nmap NSE

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

SVScanner - Scanner Vulnerability And MaSsive Exploit.

Safari local file reader

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

PwnableWeb is a suite of web applications for use in information security training.

Working Python test and PoC for CVE-2018-11776, includes Docker lab

A sandbox to protect your pwn challenges being pwned in CTF AWD.

Venom - A Multi-hop Proxy for Penetration Testers

generate and search pattern string for exploit development

200 TOOLS BY 0XID4FF0X FOR TERMUX

Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing

Writeups for HacktheBox 'boot2root' machines

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

Web CTF CheatSheet 🐈

📖 [译] SploitFun Linux x86 Exploit 开发系列教程

won't maintain

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

CTF Challenge Framework for Windows 8 and above

Detect hidden files and text in images

CryptoLocker is open source files encrypt-er. Crypto is developed in Visual C++. It has features encrypt all file, lock down the system and send keys back to the server. Multi-threaded functionality helps to this tool make encryption faster.

i8080 precise replica in Verilog, based on reverse engineering of real die

Scan and Export RouterOS Password

A local privilege escalation chain from user to kernel for MacOS < 10.15.5. CVE-2020–9854

collection of verified Linux kernel exploits

A database of collected CTFs and their solutions.

Python script wrote to automate the process of generating various reverse shells.