#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended

Solution for BFS Ekoparty challenge 2019

A script to Fuzz and and exploit Apache struts CVE-2017-9805

Conference talk analyzing CVE-2018-8453, a Windows kernel UAF and double-free vulnerability. Covers binary diffing, exploit reproduction, heap spray,…

Educational Docker-based lab demonstrating the Heartbleed bug (CVE-2014-0160) with hacker, victim, and server containers for hands-on exploitation…

Helper scripts to remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to…

Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)

[Linux] Two Privilege Escalation techniques abusing sudo token

an asynchronous target enumeration tool

Exploit for CVE-2016-8636 integer overflow in infiniband Soft RoCE mem_check function, with educational Pwnie Adventure island exploration.

This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide…

PwnAdventure3 Server


CalderaForms 1.5.9.1 XSS (WordPress plugin) - tutorial


To solve CTFS.me problem

ARM buffer overflow challenge exploiting NFC tag input on Raspberry Pi. Includes hardware assembly guide, server code, and flag retrieval for CTF and…

Security CTF Toolkit (Not maintained anymore)

Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown…