Alternatives and similar repositories for CTF-Challenges:

Users that are interested in CTF-Challenges are comparing it to the libraries listed below

• waderwu / javaDeserializeLabs
  javaDeserializeLabs
  ☆66Updated last year
• Y4tacker / Web-Security
  A repository to record my usual studies
  ☆20Updated 2 years ago
• Firebasky / ctf-Challenge
  是一些比赛中的好题，加上自己出的一些。。。
  ☆44Updated 2 years ago
• luelueking / Deserial_Sink_With_JDBC
  Some ReadObject Sink With JDBC
  ☆202Updated 9 months ago
• wh1t3p1g / tabby-path-finder
  A neo4j procedure for tabby
  ☆116Updated 8 months ago
• Drun1baby / CTF-Repo-2023
  2023 各大 CTF 的比赛附件
  ☆49Updated last year
• ax1sX / RouteCheck-Alpha
  A Java Route Collection Tool
  ☆90Updated 6 months ago
• yaklang / syntaxflow
  Lessons for syntaxflow zero to hero
  ☆48Updated 5 months ago
• kezibei / php-filter-iconv
  ☆60Updated 5 months ago
• WinMin / Be-a-Docker-Escaper
  The container escape challenge of Be A RWCTFer competition (https://be-a-rwctfer.realworldctf.com/)
  ☆59Updated 11 months ago
• p1n93r / SpringBootAdmin-thymeleaf-SSTI
  SpringBootAdmin-thymeleaf-SSTI which can cause RCE
  ☆78Updated last year
• Whoopsunix / PPPYSO
  proof-of-concept for generating Java deserialization payload | Proxy MemShell
  ☆183Updated 8 months ago
• Y4tacker / HackingFernFlower
  2023白帽补天大会部分代码
  ☆121Updated last year
• kezibei / fastjson_payload
  ☆206Updated 5 months ago
• woodpecker-appstore / jexpr-encoder-utils
  Java表达式语句生成器
  ☆184Updated last year
• waderwu / My-CTF-Challenges
  Collection of CTF Web challenges I made
  ☆52Updated last year
• wa1ki0g / NoAuth
  java-web 自动化鉴权绕过
  ☆257Updated 4 months ago
• yzddmr6 / Java-Js-Engine-Payloads
  Java Js Engine Payloads All in one
  ☆270Updated last year
• wh1t3p1g / tabby-vul-finder
  A vul-finder for loading CPG and automated finding vul-call-chains
  ☆37Updated 4 months ago
• wealeson1 / wcpvs
  Web Cache Poisoning Vulnerability Scanner
  ☆35Updated last month
• EkiXu / marshalexp
  ☆21Updated 2 years ago
• dushixiang / evil-mysql-server
  evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.
  ☆87Updated 2 years ago
• Awrrays / Frame-DefaultPass
  所有碰到过的默认口令
  ☆103Updated 11 months ago
• Lonely-night / fastjsonVul
  fastjson 80 远程代码执行漏洞复现
  ☆190Updated 2 years ago
• Whoopsunix / utf-8-overlong-encoding
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆120Updated 11 months ago
• ctfhub-team / challenge_generate
  向导式CTF题目环境模板生成器
  ☆32Updated last year
• ccdr4gon / Dr4gonSword
  ☆96Updated last year
• webraybtl / zentaopms_poc
  禅道相关poc
  ☆161Updated 8 months ago
• BeichenDream / JDR
  ☆137Updated 2 years ago
• depycode / fastjson-local-echo
  基于dbcp的fastjson rce 回显
  ☆190Updated 3 years ago