A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
ALL IN ONE Hacking Tool For Hackers
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
CTF framework and exploit development library
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
CTFs as you need them
Create randomly insecure VMs
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A Game of Hackers (CTF Scoreboard & Game Manager)
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
A colleciton of CTF write-ups all using pwntools
Using Intel's PIN tool to solve CTF problems
A small course on CTF (wargames) for beginners [in Russian]
Things we learned from Capture The Flag hacking competitions we participated in.
:hammer: A multiple reverse shell session/client manager via terminal
CTF Writeups
Passive market-making bot for Predict.fun: quotes from live order books, replaces stale orders and cancels on unsafe price/depth; Windows desktop app and web console for Ubuntu servers.
Writeups of Capture The Flag Competitions