ctf

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

A collection of hacking / penetration testing resources to make you better!

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

CTF framework and exploit development library

A curated list of CTF frameworks, libraries, resources and softwares

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Come and join us, we need you!

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

CTFs as you need them

Monitor linux processes without root permissions

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Google CTF

CTF竞赛权威指南

【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

Snoop — инструмент разведки на основе открытых данных (OSINT world)

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Automatic SSRF fuzzer and exploitation tool

👻Stowaway -- Multi-hop Proxy Tool for pentesters

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

Fully featured and community-driven hacking environment

Web CTF CheatSheet 🐈

CTF challenge (mostly pwn) files, scripts etc

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me