sea5kg / ctf01dLinks
Jury System for attack-defence ctf game (ctf-scoreboard). Or you can use it for training.
☆25Updated last month
Alternatives and similar repositories for ctf01d
Users that are interested in ctf01d are comparing it to the libraries listed below
Sorting:
- NotSoCereal: A Deserialization exploit playground☆52Updated 3 years ago
- A collection of Server-Side Prototype Pollution gadgets and exploits☆189Updated 4 months ago
- C4T BuT S4D Attack-Defence CTF☆13Updated 3 years ago
- Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used …☆192Updated last month
- PP-finder Help you find gadget for prototype pollution exploitation☆163Updated 9 months ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.☆115Updated 3 weeks ago
- Blog about HTTP Request Smuggling, including a demo application.☆27Updated 3 years ago
- ☆176Updated 4 years ago
- Attack & Defense CTF Farm based on DestructiveFarm☆94Updated 6 months ago
- Phar + JPG Polyglot generator and playground (CTF CODE)☆89Updated 6 years ago
- This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…☆108Updated last year
- Collection of quirky behaviours of code and the CTF challenges that I made around them.☆26Updated 4 years ago
- ☆166Updated 3 years ago
- HTTP redirection service designed to help bypass SSRF filters. Integrated with Burp Suite.☆36Updated last month
- Burp Extension to add additional functionality for pentesting websocket based applications☆94Updated 11 months ago
- Security Advisories☆32Updated last month
- A simple remote scanner for Atlassian Jira☆121Updated 2 years ago
- Challenges I wrote for various CTF competitions☆43Updated 10 months ago
- A python based minimal DNS server to test/verify DNS rebinding attacks☆48Updated 2 years ago
- Searcher for cross-site leaks (XS-Leaks)☆82Updated 2 years ago
- Bunch of CTF writeups.☆35Updated 4 years ago
- ☆30Updated last year
- Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)☆89Updated 4 years ago
- ☆152Updated last year
- Client-Side Prototype Pollution Tools☆84Updated 3 years ago
- Workshop given at Hack in Paris 2019☆122Updated last year
- AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.☆42Updated last year
- Same Origin XSS challenge☆61Updated 3 years ago
- Utility for creating ZipSlip archives☆72Updated 2 years ago
- CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.☆140Updated 11 months ago