Repository Index

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

• decryption
• natural-language-processing
• cryptography
• cipher

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]

• agent
• ai
• developer-tools
• llm

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

• owasp
• javascript
• vulnerable
• hacking

CTFs as you need them

• ctf
• security
• education
• flask

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Create randomly insecure VMs

• security
• security-vulnerability
• virtualization
• randomization

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

• appsec
• cicd
• devops
• infosec

A Game of Hackers (CTF Scoreboard & Game Manager)

• security
• scoring-engine
• ctf

The repository host gives no description.

A colleciton of CTF write-ups all using pwntools

Using Intel's PIN tool to solve CTF problems

• ctf
• pin
• reverse-engineering
• instruction-counting

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

A Highly Accessible and Automated Virtualization Platform for Security Education

• cybersecurity
• virtualization
• docker
• virtualbox

A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code

• ctf
• echoctf
• cybersecurity
• hacking

Detect hidden files and text in images

• steganography
• ctf
• stego
• capture-the-flag

A flexible playground for Android CTF challenges.

• android
• ctf
• cybersecurity
• playground

Web interface to explore Suricata EVE outputs

• attack-defense-ctf
• ctf
• network-monitor
• suricata

CTF in a box. Minimal setup required. (not production-ready yet)

Security training for the apps you actually ship. Open your browser and start hacking.

• appsec
• ctf
• cybersecurity
• nextjs

Agentic LLM CTF to test prompt injection attacks and preventions

Capture The Flag competition challenge write-ups

• ctf
• ctf-writeups
• ctf-solutions
• writeup