348 Open source projects that are alternatives of or similar to Newbie Security List

China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关

备考 OSCP 的各种干货资料/渗透测试干货资料

A tool to test security of json web token

Some good resources for getting started with application security

CTFs as you need them

Cross-platform CTF problem container manager

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p

PHDays Online CTF 2017. Developed with ♥ by Hackerdom team

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

🎯 XML External Entity (XXE) Injection Payload List

A Game platform to spread awareness among school and university students about various cyber attacks.

☕ Bamboofox CTF training platform

CTF (Capture The Flag) writeups, code snippets, notes, scripts

QCTF School 2018. Developed with ♥ by Hackerdom team

This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.

EmpireCTF – write-ups, capture the flag, cybersecurity

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop supporting CTFd, FBCTF and RootTheBox

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

Perfect Blue's CTF Writeups

How to exploit a double free vulnerability in 2021. Use After Free for Dummies

Writeups for CTF challenges.

Black Hat Python workshop for Disobey 2019

Pentest Lab on OpenStack with Heat, Chef provisioning and Docker

🎯 PHP / ASP - Shell Backdoor List 🎯

Examples of security features (or mishaps) on web applications -- these are mostly examples and tutorials from the WASEC book.

A docker repository for deploying pwnable challenges in CTF

This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.

CTF solutions from Osaka University CTF team Wani Hackase

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

Capture the flag Game

Writeups for infosec Capture the Flag events by team Galaxians

Pure-python distributable Attack-Defence CTF platform, created to be easily set up.

CTF writeups from Balsn

Capture The Flag Information

Repository to train/learn memory corruption on the ARM platform.

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

An Easy / Quick / Cheap Integrated Platform

Tutorials written by me.

Pwnable|Web Security|Cryptography CTF-style challenges

封装多种CTF和平时常见加密及编码C#类库

Using Intel's PIN tool to solve CTF problems

Lazy python wrapper of KLEE for solving CTF challenges

Hacker101 CTF Writeup

FactorDB client library with Python

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

澳門網絡安全暨奪旗競賽協會(Macau Cyber Security and Capture The Flag Association)MOCSCTF/MOCTF

渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全

介绍一些CTF训练的站点

A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda

💖CTF pwn framework.

🏴 🏴 🏴

A very loud but fast recon scan and pentest template creator for use in CTF's/OSCP/Hackthebox...

Writeups of CTF challenges

Exploit Development and Reverse Engineering with GDB Made Easy

The iCTF Framework, presented by Shellphish!

My CTF tools & some other stuff

WeCTF 2020 Source Code & Organizer's Writeup

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

🌟复习考研的那些事儿(清华912考研)～～