Ctf Libraries

13 Components & Libraries

Sortby

Ctf Libraries

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Input encrypted text, get the decrypted text back. "What type of encryption?" That's the point. You don't know, you just know it's possibly encrypted. Ciphey will figure it out for you. Ciphey can so…

CTFs as you need them

CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. You can use the au…

Fully featured and community-driven hacking environment

Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Exegol is the best solution to deploy powerful hacking environments se…

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

Name-that-hash will name that hash type! Honestly, do you need any more convincing? 😂 But, let's look at the features more in-depth. Here HashID displays Skype before NTLM, whereas Name-That-Hash und…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

To install the application, simply use pip: To install the tool for development purposes, run the following command (after downloading a copy): To get an overview of all possible options, simply call…

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, design for CTF

Bypass the WAF without knowing WAF 焚靖是一个针对CTF比赛中Jinja SSTI绕过WAF的全自动脚本，可以自动攻击给定的网站或接口。在以下方法中选择一种然后开始使用：你可以直接在webui里指定参数并自动攻击这里攻击的是一个GET参数：name 在左边填入并点击开始分析，然后在右边输入命令就行了在终端可以用scan功能，猜测某个页面的参数并自动攻击…

Multi-threaded URL enumeration/content-discovery tool in Python.

I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity tooling in general. ZenBuster may not be the fastest or most comprehensive tool…

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

To install myjwt, simply use pip: To run mywt from a docker image, run: To install myjwt, on git: To install myjwt on BlackArch: The log's become rather long. It moved to its own file.

Analyse PNG file format for CTF, python API and CLI

Best tool to analyse PNG files, it shows you PNG chunks : header, palette, and text. PngParser(file) file: str or file type PngParser.get_image_data() PngParser.set_image_data() PngParser.get_chunk_b…

Use grepaddr to extract (grep) all kinds of addresses from stdin like URLs (incl. IPv4/IPv6), IP addresses & ranges (IPv4/IPv6), e-mail addresses, MAC addresses.

GrepAddr takes input from stdin and extracts different kinds of addresses from stdin like URLs, IP addresses, e-mail addresses, MAC addresses and more. Essentially it's grep, but for interesting addr…