ctf

The best tool for finding one gadget RCE in libc.so.6

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.

OFRAK: unpack, modify, and repack binaries.

跨平台密码学工具箱。包含编解码，编码转换，加解密， 哈希，MAC，签名，大数运算，压缩，二维码功能，CTF等功能。

Penelope Shell Handler

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

Build a database of libc offsets to simplify exploitation

Macro-header for compile-time C obfuscation (tcc, win x86/x64)

Ctf solutions from p4 team

基于Memprocfs和Volatility的可视化内存取证工具

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

各种安全相关思维导图整理收集。渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，数据安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

A curated list of awesome privilege escalation

A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension.

The GZ::CTF project, an open source CTF platform.

Vulnerable app with examples showing how to not use secrets

CTF Field Guide

How to exploit a double free vulnerability in 2021. Use After Free for Dummies

The repo contains a series of challenges for learning Frida for Android Exploitation.

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

Python implementations of cryptographic attacks and utilities.

a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM

Algorithmic, Data Structures, Frontend and Pentest - Programming challenges and competitions to improve knowledge.

网络安全学习资料，欢迎补充