flawwan/CTF-Candy external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

flawwan/CTF-Candy

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/flawwan/CTF-Candy)

Close

flawwan / CTF-CandyView on GitHubMore

• External links
• Readme badge

Here, have some candy. Useful tools and cheat sheet for Captures The Flag (CTF) contests. And also for Computer Security in general.

☆68Dec 24, 2018Updated 7 years ago

Alternatives and similar repositories for CTF-Candy

Users that are interested in CTF-Candy are comparing it to the libraries listed below

• Tuhinshubhra / Path-Finder

  View on GitHub
  Visualizing Path Finding using A* algorithm
  ☆14Nov 7, 2022Updated 3 years ago
• eyalitki / presentations

  View on GitHub
  Collection of my slide decks, conference videos and research white papers
  ☆27Sep 23, 2025Updated 5 months ago
• Leoid / NonPublishedExploits

  View on GitHub
  A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs
  ☆10Nov 29, 2020Updated 5 years ago
• olliencc / appsec-vulnerability-periodic-table

  View on GitHub
  Application Security Vulnerability Periodic Table
  ☆14Aug 25, 2014Updated 11 years ago
• Dheerajmadhukar / Prototype-Pollution-Lab_me_dheeraj

  View on GitHub
  Prototype-Pollution-Lab to chain the vulnerabilities between multiple accounts.
  ☆13Sep 11, 2021Updated 4 years ago
• mrnitesh / WSDL

  View on GitHub
  It contain google dork to find the wsdl file.
  ☆13May 27, 2020Updated 5 years ago
• esell / azure-sec-lab

  View on GitHub
  A small pentesting lab for Azure
  ☆10Apr 19, 2019Updated 6 years ago
• joefizz / autofindomain

  View on GitHub
  ☆24Jan 26, 2021Updated 5 years ago
• frizb / awesome-pentest-cheat-sheets

  View on GitHub
  Collection of the cheat sheets useful for pentesting
  ☆10May 11, 2018Updated 7 years ago
• umair9747 / Archer

  View on GitHub
  A tool to check for response status codes with ease
  ☆13Apr 29, 2023Updated 2 years ago
• edwatering / ElasticSearch_scanner

  View on GitHub
  ElasticSearch vulnerable scanner
  ☆16Oct 6, 2019Updated 6 years ago
• insuyun / pwnbox

  View on GitHub
  Capture-The-Flag(CTF) toolkit
  ☆11Jan 8, 2015Updated 11 years ago
• bhattsameer / devtool-snippets-forhacks

  View on GitHub
  Collection of snippets for devtools.
  ☆13Mar 17, 2021Updated 4 years ago
• lkorba / enumsh

  View on GitHub
  ☆10Oct 30, 2019Updated 6 years ago
• pry0cc / jf

  View on GitHub
  A wrapper around jq, to help you parse jq output!
  ☆30Aug 23, 2020Updated 5 years ago
• nachiketrathod / HTTP.Request.Smuggling.Desync.Attack

  View on GitHub
  ☆15Apr 13, 2021Updated 4 years ago
• hahwul / hbxss

  View on GitHub
  Security test tool for Blind XSS
  ☆26Mar 5, 2020Updated 6 years ago
• pkmdev-sec / AWS_Subdomain_Takeover_Detector

  View on GitHub
  This automation protect against subdomain takeover on AWS env which also send alerts on slack.
  ☆12Aug 1, 2021Updated 4 years ago
• mrT4ntr4 / WriteupsByCat

  View on GitHub
  Filter writeups from ctftime.org by CATegories
  ☆14Nov 4, 2019Updated 6 years ago
• xYantix / Notes

  View on GitHub
  ☆14Nov 29, 2019Updated 6 years ago
• nickmyb / android_security_zero_to_one

  View on GitHub
  ☆15Feb 5, 2022Updated 4 years ago
• toufik-airane / leakin

  View on GitHub
  Secrets detection based on regular expressions.
  ☆22Apr 15, 2025Updated 10 months ago
• hahwul / can-i-protect-xss

  View on GitHub
  Everything about xss protection technology
  ☆14Oct 22, 2019Updated 6 years ago
• CyberLight / cyxbot

  View on GitHub
  Bug bounty bot for channel
  ☆16Dec 10, 2022Updated 3 years ago
• zzeitlin / udedup

  View on GitHub
  A modular URL deduplication tool.
  ☆19Feb 19, 2025Updated last year
• hahwul / volt

  View on GitHub
  ⚡ Golang library for quick make pentest tools
  ☆15Apr 7, 2025Updated 10 months ago
• laconicwolf / cors-scanner

  View on GitHub
  A multi-threaded scanner that helps identify CORS flaws/misconfigurations
  ☆19Nov 18, 2019Updated 6 years ago
• D3n0Duz / WebPentestChecklist

  View on GitHub
  Workflow for pentesting web applications.
  ☆21Feb 19, 2019Updated 7 years ago
• si9int / gDork

  View on GitHub
  A Mozilla Firefox extension which allows quick access to your google-dorking result
  ☆19Jun 18, 2020Updated 5 years ago
• Sachin-v3rma / hactivity

  View on GitHub
  A Tool to find subdomains from hackerone reports.
  ☆17Jun 23, 2021Updated 4 years ago
• owtf / http-request-translator

  View on GitHub
  HTTP Request Translator (hrt) translates raw HTTP requests to different scripts (bash, python, etc.)
  ☆17Feb 24, 2017Updated 9 years ago
• ninjadiary / Secret_Diary_of_FrinJa

  View on GitHub
  All kind of frida stuff when needed in pentesting or reverse engineering of an android app - The perfect starter kit
  ☆18Jun 2, 2020Updated 5 years ago
• kongsec / Wordpress-BruteForce-List

  View on GitHub
  WordPress Bruteforce List, Default paths and endpoints
  ☆75May 14, 2022Updated 3 years ago
• DictionaryHouse / collection-Good-information-security-list

  View on GitHub
  优质安全 list
  ☆12Nov 22, 2017Updated 8 years ago
• hahwul / XSS-Payload-without-Anything

  View on GitHub
  XSS Payload without Anything.
  ☆104Jun 28, 2019Updated 6 years ago
• random-robbie / bugbountydork

  View on GitHub
  Bug Bounty Dork
  ☆72Feb 14, 2022Updated 4 years ago
• HonKer-Dynamo / Teemo

  View on GitHub
  ☆18Sep 6, 2018Updated 7 years ago
• hakluke / haksecuritytxt

  View on GitHub
  Takes a list of domains as the input, checks if they have a security.txt, outputs the results.
  ☆16May 15, 2020Updated 5 years ago
• bp0lr / wurl

  View on GitHub
  A tool to test working urls.
  ☆43Nov 17, 2020Updated 5 years ago