#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
ragibson/steganographyLeast Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction)…
bee-san/name-that-hashIdentify 300+ hash types instantly via CLI or web app. Prioritizes popular hashes, provides summaries, and integrates with HashCat and John the…
guyoung/captfencoderCross-platform security toolkit for encoding, classical and modern cryptography, hash computation, and online reconnaissance queries, designed for…
owasp/securecodingdojoThe Secure Coding Dojo is a platform for delivering secure coding knowledge.
azr43lkn1ght/dfir-labsHands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…
liveoverflow/pwnadventure3PwnAdventure3 Server
m1ghtym0/browser-pwnAn updated collection of resources targeting browser-exploitation.
lrh2000/stackrotCVE-2023-3269: Linux kernel privilege escalation vulnerability
rickdejager/stegseek:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:
ralireza/android-security-teryaaghAndroid security guides, roadmap, docs, courses, write-ups, and teryaagh.
adamkadaban/ctfsCTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done
juice-shop/multi-juicerHost and manage multiple Juice Shop instances for security trainings and Capture The Flags
bcoles/kasldKASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration,…
s1n6h/pentest-harnessSelf-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Plugin-based, multi-provider LLM support with local…
nongiach/sudo_inject[Linux] Two Privilege Escalation techniques abusing sudo token
orangetw/my-presentation-slidesCollections of Orange Tsai's public presentation slides.
mvelazc0/badzureBadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…
the-viper-one/pentest-everythingA collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support…
