Top 23 Ctf Open-Source Projects

• Awesome-Hacking-Resources

  2 12,120 0.0

  A collection of hacking / penetration testing resources to make you better!

  Project mention: Cybersecurity Repositories | reddit.com/r/netsecstudents | 2022-05-31

  Hacking Resources

• Ciphey

  8 10,071 5.7 Python

  ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

  

  Project mention: How do I get Ciphey to use more cores for decryption? | reddit.com/r/hacking | 2022-02-16

  repo: https://github.com/Ciphey/Ciphey

• Scout APM

  scoutapm.com

  sponsored

  Less time debugging, more time building. Scout APM allows you to find and fix performance issues with no hassle. Now with error monitoring and external services monitoring, Scout is a developer's best friend when it comes to application development.

  

• pwntools

  3 9,153 8.2 Python

  CTF framework and exploit development library

  

  Project mention: Awesome CTF : Top Learning Resource Labs | reddit.com/r/TutorialBoy | 2021-11-13

  Pwntools - CTF Framework for writing exploits.

• awesome-ctf

  4 6,978 0.0 JavaScript

  A curated list of CTF frameworks, libraries, resources and softwares

  Project mention: Cybersecurity Repositories | reddit.com/r/netsecstudents | 2022-05-31

  CTF

• juice-shop

  8 6,941 9.9 TypeScript

  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  

  Project mention: Capture the flag: A Node.js web app vulnerability practice | reddit.com/r/javascript | 2022-05-20

  Take a look at juice-shop as well.

• MBE

  3 4,824 1.3 C

  Course materials for Modern Binary Exploitation by RPISEC

  

  Project mention: BOF: How to calculate the exact number of NOPS and length of ESP | reddit.com/r/oscp | 2021-11-07

  It's not super current, but I really recommend the [Modern Binary Exploitation}(https://github.com/RPISEC/MBE) course produced by RPISEC if you haven't seen it. It approaches things in a nice structured way.

• pwndbg

  4 4,668 8.0 Python

  Exploit Development and Reverse Engineering with GDB Made Easy

  

  Project mention: Hacked GDB Dashboard Puts It All on Display | news.ycombinator.com | 2022-03-24

  There are a lot of these types of tools already in the reverse engineering community (in order of lowest chance of breaking when you throw really weird stuff at it):

  GEF: https://gef.readthedocs.io/en/master/

  PWNDBG: https://github.com/pwndbg/pwndbg

  PEDA: https://github.com/longld/peda

  They also come with a slew of different features to aid in RE/exploit dev, but many of them are also useful for debugging really weird issues.

• JetBrains

  surveys.jetbrains.com

  sponsored

  Developer Ecosystem Survey 2022. Take part in the Developer Ecosystem Survey 2022 by JetBrains and get a chance to win a Macbook, a Nvidia graphics card, or other prizes. We’ll create an infographic full of stats, and you’ll get personalized results so you can compare yourself with other developers.

  

• gef

  4 4,647 9.0 Python

  GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers

  Project mention: Debugging with GDB | news.ycombinator.com | 2022-03-21

  I still struggle with GDB but my excuse is that I seldom use it.

  When I was studying reverse engineering though, I came across a really cool kit (which I've yet to find an alternative for lldb, which would be nice given: rust)

  I'd recommend checking it out, if for no other reason than it makes a lot of things really obvious (like watching what value lives in which register).

  https://github.com/hugsy/gef

  LLDB's closest alternative to this is called Venom, but it's not the same at all. https://github.com/ovh/venom

• CTFd

  2 4,049 7.5 Python

  CTFs as you need them

  

  Project mention: Intentionally vulnerable networks for hackers | reddit.com/r/hacking | 2022-03-07

  TryHackMe and CTFd might be worth a look.

• google-ctf

  0 2,733 5.6 Go

  Google CTF

  

• pspy

  2 2,732 0.0 Go

  Monitor linux processes without root permissions

  Project mention: I passed with 100 points on second attempt AMA | reddit.com/r/oscp | 2022-06-14

  I also forgot https://github.com/DominicBreuker/pspy obviously for linux privesc

• one_gadget

  1 1,599 6.6 Ruby

  The best tool for finding one gadget RCE in libc.so.6

  Project mention: Awesome CTF : Top Learning Resource Labs | reddit.com/r/TutorialBoy | 2021-11-13

  one_gadget - A tool to find the one gadget execve('/bin/sh', NULL, NULL) call.

• ctf

  7 1,570 5.8 Python

  Ctf solutions from p4 team

  

  Project mention: Question about ECDSA | reddit.com/r/cryptography | 2022-06-24

• SUDO_KILLER

  0 1,535 5.5 Shell

  A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

• hackthebox-writeups

  0 1,511 6.6

  Writeups for HacktheBox 'boot2root' machines

  

• snoop

  3 1,460 9.4 Python

  Snoop — инструмент разведки на основе открытых данных (OSINT world)

  Project mention: Tool das alle mit E-Mail verknüpfte Accounts auflistet? | reddit.com/r/de_EDV | 2022-06-22

• Stowaway

  3 1,433 5.7 Go

  👻Stowaway -- Multi-hop Proxy Tool for pentesters

  Project mention: Stowaway -- Multi-hop Proxy Tool for pentesters | reddit.com/r/CKsTechNews | 2022-05-07

• reverse-shell-generator

  2 1,264 7.7 JavaScript

  Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

  Project mention: bash reverse shell not working | reddit.com/r/hacking | 2022-05-24

• Name-That-Hash

  1 1,057 3.8 Python

  🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

  

  Project mention: Need some information about a password hash | reddit.com/r/Hacking_Tutorials | 2021-09-11

  This is what I use to identify hashes I am unfamiliar with. https://github.com/HashPals/Name-That-Hash

• MemLabs

  0 1,043 0.6 Shell

  Educational, CTF-styled labs for individuals interested in Memory Forensics

• Zeratool

  6 870 4.9 Python

  Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems

  Project mention: GitHub - ChrisTheCoolHut/Zeratool: Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems | reddit.com/r/bag_o_news | 2021-12-26

• CaptfEncoder

  0 849 4.3 JavaScript

  Captfencoder is a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools.

• GraphQLmap

  1 845 3.3 Python

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

  Project mention: How to use undocumented web APIs | news.ycombinator.com | 2022-03-10

Ctf related posts

• Question about ECDSA
  2 projects | reddit.com/r/cryptography | 24 Jun 2022
• Stuck on a forensics challenge
  1 project | reddit.com/r/CTFlearn | 23 Jun 2022
• ctfd-parser: Extract the challenges from a remote CTFd instance to a local folder
  2 projects | reddit.com/r/securityCTF | 21 Jun 2022
• I passed with 100 points on second attempt AMA
  11 projects | reddit.com/r/oscp | 14 Jun 2022
• bash reverse shell not working
  1 project | reddit.com/r/hacking | 24 May 2022
• CTFever: A Toolkit For CTFer
  1 project | news.ycombinator.com | 3 May 2022
• CTFever: A toolkit for CTF fevers
  2 projects | reddit.com/r/SideProject | 3 May 2022

Index

Sponsored

Static code analysis for 29 languages.

Your projects are multi-language. So is SonarQube analysis. Find Bugs, Vulnerabilities, Security Hotspots, and Code Smells so you can release quality code every time. Get started analyzing your projects today for free.

www.sonarqube.org