Alternatives and similar repositories for NCTF2023:

Users that are interested in NCTF2023 are comparing it to the libraries listed below

• Fushuling / TaintScaner
  一款基于污点分析的PHP扫描工具，能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径，同时支持单独对函数的扫描。
  ☆43Updated 3 weeks ago
• kezibei / php-filter-iconv
  ☆68Updated 6 months ago
• Drun1baby / CTF-Repo-2023
  2023 各大 CTF 的比赛附件
  ☆49Updated last year
• wh1t3p1g / tabby-vul-finder
  A vul-finder for loading CPG and automated finding vul-call-chains
  ☆41Updated 5 months ago
• ProbiusOfficial / PHP-FilterChain-Exploit
  A Online PHP FilterChain Generator.
  ☆15Updated 7 months ago
• luelueking / Deserial_Sink_With_JDBC
  Some ReadObject Sink With JDBC
  ☆207Updated 10 months ago
• Jlan45 / AWDJavaWebPatch
  通过jar包快速生成patch模版
  ☆47Updated last year
• Y4tacker / HackingFernFlower
  2023白帽补天大会部分代码
  ☆122Updated last year
• ProbiusOfficial / frp-R3shell
  reverse shell in frp
  ☆28Updated 11 months ago
• waderwu / javaDeserializeLabs
  javaDeserializeLabs
  ☆66Updated last year
• Drun1baby / AWD-AWDP_SecFilters
  为了准备 AWD，写了个 Filter 的集合
  ☆80Updated 5 months ago
• 0range-x / dragon-lab
  ☆55Updated last year
• Boogipop / JavaSec
  JavaSec
  ☆30Updated last year
• Firebasky / ctf-Challenge
  是一些比赛中的好题，加上自己出的一些。。。
  ☆43Updated 2 years ago
• heimao-box / pwnpasi
  ctf一键栈溢出、格式化字符串pwn工具/一键pwn利用工具
  ☆26Updated last week
• Dawnnnnnn / AwdAttackFramework
  一个AWD批量攻击框架
  ☆22Updated 4 years ago
• Whoopsunix / utf-8-overlong-encoding
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆121Updated last year
• luelueking / CVE-2022-25845-In-Spring
  CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!
  ☆88Updated 4 months ago
• yulate / ReflectorMate
  idea插件，快速生成反序列化中常用的方法，比如setFieldValue、createTemplatesImpl等
  ☆16Updated 5 months ago
• ax1sX / RouteCheck-Alpha
  A Java Route Collection Tool
  ☆91Updated 7 months ago
• Esonhugh / Gopherus3
  Python3 Based gopherus, completely refactored and added more feature.
  ☆43Updated 4 months ago
• A7cc / Vulnerabilities_Server
  一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages
  ☆71Updated 2 weeks ago
• hmt38 / java_Laplace_Fluid_Maid
  javaweb的流量监控脚本，基于filter，也有jar版本，那天曹佬说它就取名叫拉普拉斯的流量女仆(java_Laplace_Fluid_Maid)好了
  ☆10Updated last year
• for-A1kaid / CodeAudit
  记录一些代码审计过的源码
  ☆145Updated last month
• ttonys / CodeQLAnalyseJar
  CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库
  ☆34Updated 2 years ago
• qsnctf / qsnctf_base_docker_images
  青少年CTF基础Docker镜像
  ☆22Updated 7 months ago
• EkiXu / marshalexp
  ☆21Updated 2 years ago
• Y4Sec-Team / mysql-jdbc-tricks
  JDBC Attack Tricks
  ☆142Updated last year
• Whoopsunix / PPPYSO
  proof-of-concept for generating Java deserialization payload | Proxy MemShell
  ☆185Updated 9 months ago
• wangsir01 / docs
  互联网数字垃圾回收专用废纸篓
  ☆47Updated last year