Search Results for "ctf"
Sort By:
Showing 50 open source projects for "ctf"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
1
Google CTF
Google CTF
Google CTF is the public repository that houses most of the challenges from Google’s Capture-the-Flag competitions since 2017 and the infrastructure used to run them. It’s a learning and practice archive: competitors and educators can replay tasks across categories like pwn, reversing, crypto, web, sandboxing, and forensics. The code and binaries intentionally contain vulnerabilities—by design—so users can explore exploit chains and patching in realistic settings. -
2
HackTheBox CTF Writeups
This cheasheet is aimed at the CTF Players and Beginners
HackTheBox CTF Writeups is a curated directory of walkthroughs for retired Hack The Box machines. It is designed to help CTF players and cybersecurity learners study complete penetration-testing scenarios in legal practice environments. Entries are organized by machine name and include the target operating system and difficulty level. The collection spans Linux, Windows, FreeBSD, Solaris, and other environments across easy through insane difficulty ratings. -
3
Privilege-Escalation
This cheasheet is aimed at the CTF Players and Beginners
...Individual guides connect these concepts to vulnerable lab machines and CTF examples. This structure helps learners recognize recurring misconfigurations and understand why they create security risk. The collection is primarily focused on Linux-oriented privilege escalation and educational security practice. -
4
CTFcrackTools
China's first CTFTools framework
The first CTF tool framework in China. China's first CTFTools framework designed to help CTFer quickly overcome the CTF problem. Use kotlin and java mixed development. This is probably the first tool framework applied to CTF in China. Built-in current mainstream password, includes but is not limited to Virginia password, Caesar password, fence password. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
Pwntools
CTF framework and exploit development library
Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. Whether you’re using it to write exploits, or as part of another software project will dictate how you use it. Historically pwntools was used as a sort of exploit-writing DSL. -
6
reverse-skill
Reverse Engineering and Authorized Penetration Testing
reverse-skill is a cybersecurity skill router for AI coding agents working on authorized reverse engineering, penetration testing, CTF, and security research tasks. It analyzes the target type and directs the agent to an appropriate methodology instead of relying on improvised commands. Its playbooks cover Android and iOS applications, native binaries, .NET, JavaScript, firmware, malware, APIs, supply chains, and other specialized scenarios. The package checks locally available tools and can bootstrap supporting scripts, MCP servers, and utilities when needed. ... -
7
T3MP3ST
Autonomous red teaming platform
...It emphasizes reproducible benchmark claims, keyless operation, and a clear status table that separates stable capabilities from experimental or roadmap work. Its stated target areas include web apps, CTF challenges, source-code review, OSS vulnerability hunting, smart contracts, and embedded or robotics research. Because it automates offensive workflows, it must only be used on systems where the user has explicit written permission. -
8
Exegol
Fully featured and community-driven hacking environment
Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day-to-day engagements. Exegol is the best solution to deploy powerful hacking environments securely, easily, and professionally. No more unstable, not-so-security-focused systems lacking major offensive tools. Kali Linux (and similar alternatives) are great toolboxes for learners, students, and junior pentesters. However professionals have different needs, and their context requires a... -
9
FieldTrip
The MATLAB toolbox for MEG, EEG and iEEG analysis
...The toolbox offers advanced analysis methods of MEG, EEG, and invasive electrophysiological data, such as time-frequency analysis, source reconstruction using dipoles, distributed sources and beamformers and non-parametric statistical testing. It supports the data formats of all major MEG systems (CTF, Neuromag/Elekta/Megin, BTi/4D, Yokogawa/Ricoh, FieldLine) and of most popular EEG systems, and new formats can be added easily. FieldTrip contains high-level functions that you can use to construct your own analysis protocols in MATLAB. Furthermore, it easily allows methods researchers to incorporate new methods for EEG/MEG analysis. -
Save Up to 91% on Cloud Compute With Spot VMsRun batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
-
10
CTFd
CTFs as you need them
CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Create your own challenges, categories, hints, and flags from the Admin Interface. Dynamic Scoring Challenges. Unlockable challenge support. Challenge plugin architecture to create your own custom challenges. Static & Regex-based flags. Custom flag plugins. Unlockable hints. File uploads to the server or an Amazon S3-compatible backend. ... -
11
GEF
Modern experience for GDB with advanced debugging capabilities
GEF is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old-school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit development. Application developers will also benefit from it, as GEF lifts a great part of regular GDB obscurity, avoiding repeating traditional commands or bringing out the relevant information from the debugging runtime. -
12
-
13
UbuntuVM for AI-Goat
Pre-configured VM for exploring AI-Goat's vulnerable LLM CTF challenge
This VM offers a hassle-free solution for exploring the AI-Goat project, "Learn AI security through a series of vulnerable LLM CTF challenges." Instead of manually setting up the required environment, which includes Git, Python3, Pip3, Docker, and Docker-Compose, you can save time by using this pre-configured VirtualBox VM. It provides a ready-to-use environment to dive into AI security challenges without the need for complex setup. If you'd prefer to install manually, you can follow the instructions on GitHub: https://github.com/dhammon/ai-goat. ... -
14
Hullu Vulnerable System
Pentesting OVA, suits VMware or VirtualBox
Hullu is a lightweight vulnerable Alpine Linux VM for cybersecurity education, ethical hacking practice, and isolated lab/CTF-style scenarios. It includes DVWA, FlaskVA, DNS Lab, BIND 9, Apache, MariaDB/MySQL, phpMyAdmin, SSH/SFTP, and optional FTP/Samba practice. Hullu 3 adds DNS Lab, BIND 9, FTP/Samba server support, and separate service accounts for Flask-based services compared with Hullu 2. Use only in an isolated lab network. Do not expose this VM to the internet. ... -
15
utkeeper99
UTKeeper99 a linux based Unreal Tournament and local Webdirect Manager
Unreal Tournament, Gaming, OldUnreal, Server, Tool # Features Highlights: # - First-Run Auto-Config Detection (should reject critical system paths) # - DryRun Mode for safe testing # - Recursive Archive Extraction (up to 10 levels deep) # - Smart File Collection (gathers all UT files from subdirs) # - Disk Space Validation before Backup # - Backup Management (List, Delete by age, etc.) # - Distribution of Maps to UT Server and Webserver # - Cloning Maps (you like CTF-Face? or a MH Map ? now play that as DM/TDM map) # - Name fixes (case sensitive for Linux) + chmod/chown defaults for UT/Web # - Advanced UT and Webserver Orphan Cleaning Tool # - Modular design for easy expansion/customization. -
16
Stegcore
A cross-platform crypto-steganography toolkit
...Unlike basic steganography tools that hide data without encrypting it, Stegcore ensures the payload is cryptographically protected at rest. Unlike pure encryption tools, the payload isn't even visible. Designed for journalists, security researchers, red teamers, digital forensics professionals, and CTF participants. -
17
ChaosEsqueAnthology
A free 3d game for PC that does not limit the player. Fight,Build,Gain
(NOTE: Make sure to download Volume2 aswell!: http://sourceforge.net/p/chaosesqueanthologyvolume2/ ) 200+ weapons. Build-able enter-able buildings (Like an FPS RPG but with interiors) (Multi-tool/ Utili-tool). City generation (all buildings enterable). A 2 iso (6GB) exploration of what QuakeC can do. Over 100 maps included, along with map editor and sourcecode. Fully free and opensource: code and media. A modification of Xonotic which included extended weapons, maps, vehicles,... -
18
...If you get a prompt of SSH keys being accepted, you are in a good shape to continue. 5. Perform an NMAP scan like how Trinity did to hack the grid! try all ports :) 6. Good luck and enjoy the CTF! Learning Pre-Requisites - This VM does not require exploiting a CVE, or use of MetaSploit/Commercial exploit tools. - Requires intermediary knowlege of linux as it is based on Alpine.
-
19
Guia de Cyber Security
Get started in the field of information security
...The guide introduces cybersecurity as a field and highlights different career paths, such as application security, cloud security, forensics, cryptography, malware analysis, threat intelligence, and security engineering. It also includes hands-on areas such as exploitation, API security testing, penetration testing tools, hardware hacking, CTF platforms, Linux distributions, virtual machines, and bug bounty resources. Because many security resources are available in different languages, the repository also points users toward translation tools. Overall, it is a broad cybersecurity resource directory for self-study, career exploration, and practical skill building. -
20
Vulnhub-CTF-Writeups
This cheasheet is aimed at CTF Players to sort Vulnhub Labs
Vulnhub CTF Writeups is a curated collection of walkthrough references for intentionally vulnerable VulnHub virtual machines. It targets beginners and CTF players who want organized practice material for penetration-testing labs. The repository gathers Hacking Articles solutions into one large directory instead of requiring users to locate each article separately. -
21
D2X-XL
OpenGL port of the classic 6dof 3D shooter Descent
D2X-XL is an OpenGL port of the classic 3D Shooter game Descent 2 for Win32, Linux and Mac OS X, containing many enhancements and bug fixes while preserving full backwards compatibility. -
22
InjuredAndroid
Vulnerable Android application that shows examples of vulnerabilities
A vulnerable Android application with ctf examples based on bug bounty findings, exploitation concepts, and pure creativity. -
23
Sploitware
Vulnerability analytics
Sploitware is a curated repository that maps the world of exploit development, offensive security, and binary exploitation into organized learning material. It brings together links to tutorials, tools, writeups, and CTF resources so that security learners don’t have to hunt across the internet for a coherent path. The focus is on practical exploitation skills: understanding memory corruption, reverse engineering, shellcode, privilege escalation, and platform specifics. By being a single, public list, it lowers the barrier for newcomers who want to go from “I know nothing about exploitation” to “I can follow a CTF writeup” in a guided way. ... -
24
-
25
Web Security Dojo
Virtual training environment to learn web app ethical hacking.
...A preconfigured, stand-alone training environment ideal for classroom and conferences. No Internet required to use. Ideal for those interested in getting hands-on practice for ethical hacking, penetration testing, bug bounties, and capture the flag (CTF). A single OVA file will import into VirtualBox and VMware. There is also an Ansible script for those brave souls that want transform their stock Ubuntu into a virtual dojo. Bow to your sensei! username: dojo password: dojo
