Awesome CTF : Top Learning Resource Labs

• Metasploit

  29 31,205 9.9 Ruby

  Metasploit Framework

  

  Metasploit - Penetration testing software.

• dnscat2

  0 3,063 0.0 PHP

  Dnscat2 - Hosts communication through DNS.

• Sonar

  www.sonarsource.com

  sponsored

  Write Clean Python Code. Always.. Sonar helps you commit clean code every time. With over 225 unique rules to find Python bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work.

  

• CTFd

  0 3,703 8.4 Python

  CTFs as you need them [Moved to: https://github.com/CTFd/CTFd] (by isislab)

  

  CTFd - Platform to host Jeopardy-style CTFs from ISISLab, NYU Tandon.

• qualcomm_android_monitor_mode

  7 227 0.0

  Qualcomm QCACLD WiFi monitor mode for Android

  Aircrack-Ng - Crack 802.11 WEP and WPA-PSK keys. apt-get install aircrack-ng

• fbctf

  0 6,403 10.0 Hack

  Platform to host Capture the Flag competitions [Moved to: https://github.com/facebookarchive/fbctf] (by facebook)

  

  FBCTF - Platform to host Capture the Flag competitions from Facebook.

• Apktool

  13 17,260 0.0 Java

  A tool for reverse engineering Android apk files

  ApkTool - Android Decompiler.

• haaukins

  0 168 0.0 Go

  A Highly Accessible and Automated Virtualization Platform for Security Education

  

  Haaukins- A Highly Accessible and Automated Virtualization Platform for Security Education.

• Mergify

  blog.mergify.com

  sponsored

  Updating dependencies is time-consuming.. Solutions like Dependabot or Renovate update but don't merge dependencies. You need to do it manually while it could be fully automated! Add a Merge Queue to your workflow and stop caring about PR management & merging. Try Mergify for free.

  

• hashcat

  32 18,254 9.2 C

  World's fastest and most advanced password recovery utility

  

  Hashcat - Password Cracker

• hack-the-arch

  0 63 0.0 Ruby

  Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!

  

  HackTheArch - CTF scoring platform.

• CyberChef

  74 22,577 8.7 JavaScript

  The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

  

  CyberChef - Web app for analyzing and decoding data.

• mellivora

  0 426 0.0 PHP

  Mellivora is a CTF engine written in PHP

  Mellivora - A CTF engine written in PHP.

• NightShade

  0 109 10.0 JavaScript

  A simple capture the flag framework. (by UnrealAkama)

  NightShade - A simple security CTF framework.

• librectf

  0 78 0.0 Python

  CTF in a box. Minimal setup required. (not production-ready yet)

  

  OpenCTF - CTF in a box. Minimal setup required.

• picoCTF

  0 261 3.7 Python

  The platform used to run picoCTF 2019.

  

  PicoCTF - The platform used to run picoCTF. A great framework to host any CTF.

• mkctf

  0 93 0.0 Python

  A CTF framework to create, build, deploy and monitor challenges

  PyChallFactory - Small framework to create/manage/package jeopardy CTF challenges.

• RootTheBox

  0 806 0.0 Python

  A Game of Hackers (CTF Scoreboard & Game Manager)

  RootTheBox - A Game of Hackers (CTF Scoreboard & Game Manager).

• scorebot

  0 48 10.0 Python

  

  Scorebot - Platform for CTFs by Legitbs (Defcon).

• SecGen

  2 2,500 0.0 Python

  Create randomly insecure VMs

  SecGen - Security Scenario Generator. Creates randomly vulnerable virtual machines.

• UglifyJS2

  5 12,728 7.0 JavaScript

  JavaScript parser / mangler / compressor / beautifier toolkit

  Uglify

• bettercap

  9 14,560 0.0 Go

  The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

  

  Bettercap - Framework to perform MITM (Man in the Middle) attacks.

• yersinia

  0 605 0.0 C

  A framework for layer 2 attacks

  Yersinia - Attack various protocols on layer 2.

• featherduster

  0 1,036 0.0 Python

  An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

  

  FeatherDuster - An automated, modular cryptanalysis tool.

• hash_extender

  0 967 0.0 C

  Hash Extender - A utility tool for performing hash length extension attacks.

• padding-oracle-attacker

  0 183 0.0 TypeScript

  🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

  padding-oracle-attacker - A CLI tool to execute padding oracle attacks.

• RsaCtfTool

  1 4,581 0.0 Python

  RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

  

  RSACTFTool - A tool for recovering RSA private keys with various attacks.

• rsatool

  0 985 0.0 Python

  rsatool can be used to calculate RSA and RSA-CRT parameters

  RSATool - Generate private key with knowledge of p and q.

• xortool

  0 1,269 0.0 Python

  A tool to analyze multi-byte xor cipher

  XORTool - A tool to analyze multi-byte xor cipher.

• JohnTheRipper

  1 4,811 0.0 C

  John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs [Moved to: https://github.com/openwall/john]

  

  John The Jumbo - Community enhanced version of John the Ripper.

• nozzlr

  0 61 10.0 Python

  Nozzlr is a bruteforce framework, trully modular and script-friendly

  Nozzlr - Nozzlr is a brute-force framework, truly modular and script-friendly.

• patator

  0 3,241 0.0 Python

  Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

  Patator - Patator is a multi-purpose brute-forcer, with a modular design.

• dllinjector

  0 471 10.0 C++

  dll injection tool that implements various methods

  

  DLLInjector - Inject DLLs in processes.

• libformatstr

  1 336 0.0 Python

  Simplify format string exploitation.

  libformatstr - Simplify format string exploitation.

• one_gadget

  0 1,862 0.0 Ruby

  The best tool for finding one gadget RCE in libc.so.6

  one_gadget - A tool to find the one gadget execve('/bin/sh', NULL, NULL) call.

• pwntools

  2 10,607 8.1 Python

  CTF framework and exploit development library

  

  Pwntools - CTF Framework for writing exploits.

• qira

  0 3,377 0.0 C

  QEMU Interactive Runtime Analyser [Moved to: https://github.com/geohot/qira] (by BinaryAnalysisPlatform)

  Qira - QEMU Interactive Runtime Analyser.

• ROPgadget

  0 3,515 0.0 Python

  This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

  ROP Gadget - Framework for ROP exploitation.

• v0lt

  0 353 10.0 Python

  Security CTF Toolkit (Not maintained anymore)

  V0lt - Security CTF Toolkit.

• creddump

  0 230 10.0 Python

  Automatically exported from code.google.com/p/creddump

  Creddump - Dump windows credentials.

• dvcs-ripper

  0 1,576 0.0 Perl

  Rip web accessible (distributed) version control systems: SVN/GIT/HG...

  DVCS Ripper - Rips web-accessible (distributed) version control systems.

• fibratus

  14 1,971 5.9 Go

  A modern tool for Windows kernel exploration and tracing with a focus on security

  Fibratus - Tool for exploration and tracing of the Windows kernel.

• shellbags

  0 144 10.0 Python

  Cross-platform, open-source shellbag parser

  Shellbags - Investigate NT_USER.dat files.

• usbrip

  0 1,026 1.8 Python

  Tracking history of USB events on GNU/Linux

  USBRip - Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux.

• volatility

  5 6,480 0.0 Python

  An advanced memory forensics framework

  

  Volatility - To investigate memory dumps.

• masscan

  19 21,633 4.6 C

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

  Masscan - Mass IP port scanner, TCP port scanner.

• nipe

  0 1,159 3.2 Perl

  An engine to make Tor network your default gateway [Moved to: https://github.com/htrgouvea/nipe] (by GouveaHeitor)

  Nipe - Nipe is a script to make Tor Network your default gateway.

• androguard

  0 4,632 4.5 Python

  Reverse engineering and pentesting for Android applications

  

  Androguard - Reverse engineer Android applications.

• apk2gold

  0 634 0.0 Shell

  CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

  Apk2Gold - Yet another Android decompiler.

• barf-project

  0 1,377 10.0 Python

  BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

  

  Barf - Binary Analysis and Reverse engineering Framework.

• binwalk

  0 7,847 6.9 Python

  Firmware Analysis Tool [Moved to: https://github.com/ReFirmLabs/binwalk] (by devttys0)

  

  BinWalk - Analyze, reverse engineer, and extracting firmware images.

• boomerang

  0 347 4.6 C++

  Boomerang Decompiler - Fighting the code-rot :)

  

  Boomerang - Decompile x86 binaries to C.

• ctf_import

  0 105 10.0 C

  Run basic functions from stripped binaries cross platform

  ctf_import – run basic functions from stripped binaries cross-platform.

• cwe_checker

  0 946 0.0 Rust

  cwe_checker finds vulnerable patterns in binary executables

  

  cwe_checker - cwe_checker finds vulnerable patterns in binary executables.

• demovfuscator

  0 628 0.0 C++

  A work-in-progress deobfuscator for movfuscated binaries [Moved to: https://github.com/leetonidas/demovfuscator]

  demovfuscator - A work-in-progress deobfuscator for movfuscated binaries.

• gef

  8 5,892 0.0 Python

  GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

  GEF - GDB plugin.

• jadx

  14 36,277 0.0 Java

  Dex to Java decompiler

  Jadx - Decompile Android files.

• Krakatau

  4 1,838 0.0 Rust

  Java decompiler, assembler, and disassembler

  Krakatau - Java decompiler and disassembler.

• objection

  6 6,417 6.0 Python

  📱 objection - runtime mobile exploration

  

  Objection - Runtime Mobile Exploration.

• peda

  2 5,543 0.0 Python

  PEDA - Python Exploit Development Assistance for GDB

  PEDA - GDB plugin (only python2.7).

• PINCE

  4 1,738 0.0 Python

  Reverse engineering tool for linux games

  PINCE - GDB front-end/reverse engineering tool, focused on game-hacking and automation.

• PinCTF

  0 474 10.0 Python

  Using Intel's PIN tool to solve CTF problems

  PinCTF - A tool that uses intel pin for Side-Channel Analysis.

• plasma

  0 3,024 0.0 Python

  Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

  Plasma - An interactive disassembler for x86/ARM/MIPS which can generate indented pseudo-code with colored syntax.

• pwndbg

  3 5,986 0.0 Python

  Exploit Development and Reverse Engineering with GDB Made Easy

  

  Pwndbg - A GDB plugin that provides a suite of utilities to hack around GDB easily.

• radare2

  0 15,238 9.9 C

  UNIX-like reverse engineering framework and command-line toolset [Moved to: https://github.com/radareorg/radare2] (by radare)

  

  radare2 - A portable reversing framework.

• Triton

  2 3,003 7.9 C++

  Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code. (by JonathanSalwan)

  Triton - Dynamic Binary Analysis (DBA) framework.

• uncompyle

  0 404 10.0 Python

  Python decompiler

  Uncompyle - Decompile Python 2.7 binaries (.pyc).

• z3

  7 9,036 9.6 C++

  The Z3 Theorem Prover

  

  Z3 - A theorem prover from Microsoft Research.

• RABCDAsm

  0 410 0.0 D

  Robust ABC (ActionScript Bytecode) [Dis-]Assembler

  RABCDAsm - Collection of utilities including an ActionScript 3 assembler/disassembler.

• SmartDeblur

  1 2,284 0.0 C++

  Restoration of defocused and blurred photos/images

  SmartDeblur - Used to deblur and fix defocused images.

• StegCracker

  0 428 1.4 Python

  Steganography brute-force utility to uncover hidden data inside files

  StegCracker - Steganography brute-force utility to uncover hidden data inside files.

• stegextract

  0 106 10.0 Shell

  Detect hidden files and text in images

  stegextract - Detect hidden files and text in images.

• zsteg

  0 1,083 0.0 Ruby

  detect stegano-hidden data in PNG & BMP

  Zsteg - PNG/BMP analysis.

• InfluxDB

  www.influxdata.com

  sponsored

  Collect and Analyze Billions of Data Points in Real Time. Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge.

  

Suggest a related project