03 Aug 2026
C
★ 36
FCracker is a command-line tool designed for brute-forcing password-protected files, supporting various formats including zip, rar, pdf, and gpg on Linux systems. Intended for personal and capture the flag (CTF) usage, it integrates with John the Ripper or Hashcat for enhanced cracking capabilities. The tool requires specific dependencies and allows users to input target files and wordlists for the cracking process.
03 Aug 2026
Python
★ 43
EtherBlob Explorer is a tool designed for the extraction and analysis of blob files from the Ethereum blockchain, leveraging the Etherscan API. It allows users to search for various human-generated data types across multiple Ethereum networks, using diverse methods such as embedded file detection, ASCII string extraction, and entropy-based searches. Notable features include support for five Ethereum test networks, user-defined search parameters, and the ability to log search results for further analysis.
03 Aug 2026
JavaScript
★ 17
The Cybersecurity CTF repository serves as a comprehensive catalog of frameworks, libraries, resources, and tutorials aimed at assisting both the creation and resolution of Capture The Flag (CTF) challenges in cybersecurity. It categorizes tools for various aspects of CTFs, including forensics, web challenges, and steganography, while also providing platforms to host competitions and resources for training and educational purposes. Notable features include a diverse array of project links, detailed sections for both creating and solving CTF challenges, and community-driven contributions to enhance resource accessibility.
03 Aug 2026
★ 623
CTFTools is a comprehensive personal toolkit for Capture The Flag (CTF) competitions and penetration testing, designed to assist users in building their own toolchain for security practice. It includes a wide range of tools categorized for tasks such as web exploitation, information gathering, payloads, and privilege escalation, alongside guidelines for effective usage. Notably, it emphasizes educational purposes, ensuring that certain potentially aggressive tools are only used for legal and ethical hacking endeavors.
03 Aug 2026
Python
★ 71
CTFsubmitter is a centralized flag submission service designed for use in Capture The Flag (CTF) competitions, which filters and manages flag submissions to prevent flooding with invalid entries. It features a REST API for submitting flags, stores submission statistics in a MongoDB database, and requires both a submitter and a worker instance for functionality. The tool operates using bottle.py and cherrypy, with an additional stats service built on tornado, allowing for real-time monitoring and management of flag submissions.
03 Aug 2026
★ 19
ctf4noobs is a project designed to promote and educate the Brazilian community about Capture The Flag (CTF) challenges, aiming to increase participation in CTF competitions. It provides comprehensive resources including introductions to CTF concepts, styles, types of challenges, and practice platforms, facilitating learning and community engagement. Notable features include detailed documentation and guidelines for potential contributors to enhance the project collaboratively.
03 Aug 2026
JavaScript
★ 65
CTF-Website-Template-2020 is a static HTML template designed for hosting Capture the Flag (CTF) events, featuring essential pages such as Home, Login, Register, Challenges, Feedback, Leaderboard, and Instructions. Its primary use case is to provide a visually appealing and functional frontend solution for organizers while the backend functionality is still under development using the Django framework. Notable features include a user-friendly layout based on the Neon Glow theme and a structured design for easy customization and integration with backend services.
03 Aug 2026
C
★ 34
ctf-toolkit is a specialized toolkit designed for assisting with Attack-Defense (AWD) and other Capture The Flag (CTF) offline competitions. Its primary use case revolves around providing necessary resources and functionalities to streamline participant engagement in CTFs, enabling efficient and effective challenge handling. Notable features include tools tailored for various aspects of CTF gameplay, enhancing the overall competitive experience.
03 Aug 2026
Python
★ 521
CTF-RSA-tool is a Python and Sage-based utility designed to assist CTF participants in efficiently solving basic RSA challenges during competitions. It automates the identification of input parameters, selects appropriate attack methods, and provides multiple functionalities for generating public keys, dumping key details, and decrypting encrypted messages. Notable features include a variety of implemented attack methods, such as Fermat's factorization, Wiener's attack, and support for input via text files, enhancing usability for quick solutions to common RSA problems.
03 Aug 2026
Python
★ 21
cryptz is an advanced encryption and decryption tool designed for secure data handling. Its primary use case involves encrypting sensitive information to prevent unauthorized access, and it features a user-friendly command-line interface to facilitate easy implementation. The tool is built using Python, with dependencies managed via a requirements file.
03 Aug 2026
Shell
★ 356
cgPwn is a specialized Ubuntu virtual machine designed for hardware hacking, reverse engineering (RE), and wargaming, equipped with an extensive suite of tools such as Pwndbg, Pwntools, and Radare2. Its primary use case is to provide a comprehensive environment for cybersecurity practitioners to develop, test, and exploit vulnerabilities. Notable features include easy setup using Vagrant, a sophisticated collection of debugging and exploitation tools, and customizable configurations through personal dotfiles.
03 Aug 2026
Shell
★ 17
CATANA is a command-line tool designed to filter wordlists based on specified password policies, enhancing the efficiency of password cracking activities. Its primary use case is to streamline the selection of potential passwords from large datasets, allowing users to customize output through various command-line options, including colored output and file redirection. Notable features include easy input and output management, succinct help documentation, and compatibility with tools like BlackArch Linux for straightforward installation.
03 Aug 2026
Python
★ 19
Cannon is a post-exploitation framework developed in Python, designed primarily for Unix-based systems to facilitate post-access tasks on compromised machines. Its functionalities include uploading and downloading files, executing pre-defined modules, and harvesting reverse shells, making it a powerful tool for security professionals and penetration testers. The framework also offers some compatibility with Windows systems, expanding its utility across different platforms.
03 Aug 2026
Python
★ 13
Brutelist is a Python script that automates the creation of seed-based dictionary attack files, primarily used during Capture the Flag (CTF) competitions or penetration testing. It allows users to generate customized password lists by combining seed phrases from a seed list with common patterns specified in a template file. Notable features include support for customizable template patterns and the ability to output the generated dictionary to a specified file.
03 Aug 2026
Python
★ 16
BlizzardWrap is a command-line interface (CLI) tool developed in Python for encoding and decoding data in various formats, including URL, Morse Code, and Base64 among others. Its primary use case is to facilitate quick and versatile transformations of text representations, making it useful for developers and cybersecurity professionals. Notable features include support for multiple encoding types, ease of installation, and a user-friendly help system.
03 Aug 2026
C
★ 21
Blindsight is a high-density hex viewer designed for visual pattern matching and manipulation of binaries under 1MB, primarily aimed at reverse engineering and one-off CTF tools. Notable features include support for live code reload to facilitate rapid prototyping with C scripts, the ability to extend and customize views using C libraries, and a focus on encouraging innovative analysis of binary data.
03 Aug 2026
Python
★ 30
The "blackhat-python" repository provides resources for a workshop focused on quick-prototyping scripts and tools for ethical hacking using Python. It emphasizes the development of custom hacking tools when existing solutions are insufficient, targeting beginners with basic programming concepts and practical exercises. The workshop content is inspired by the "Black Hat Python" book and aims to enhance participants' programming skills within the legal framework of cybersecurity.
03 Aug 2026
Python
★ 15
Bitspec is a bit pattern mini-language tool designed for specifying instruction encodings, converting byte input into an intermediate representation (IR). Its primary use case is in reverse engineering or developing code for architectures like Z80, allowing users to define bit patterns and corresponding operations easily. Notable features include the ability to parse bytecode and generate structured output, as well as comprehensive documentation and example usage provided for developers.
03 Aug 2026
Dockerfile
★ 76
Bento is a lightweight Docker container designed for penetration testers and Capture The Flag (CTF) players, providing a minimalistic environment with essential tools for web and infrastructure security testing. It supports GUI applications via X forwarding, allowing users to seamlessly run tools like Burp Suite, and includes collaborative features through an embedded code-sharing pad (CodiMD). Notable features include minimal bloat, portability, and customizable deployment options via Docker Compose.
03 Aug 2026
★ 73
The "Beginners Guide to Ethical Hacking" is a comprehensive educational resource aimed at individuals with no prior knowledge of ethical hacking. It systematically guides users through key phases, including setting up a virtual lab, information gathering, scanning, gaining access, maintaining access, and reporting. Noteworthy features include clear disclaimers about legal compliance, an emphasis on white hat hacking principles, and open contributions from the community for collaborative learning.
03 Aug 2026
Python
★ 14
Beard is a tool designed to facilitate the tracking of progress for teams participating in Attack/Defense Capture The Flag (CTF) competitions, providing real-time insights into scoreboard data. It features parsing capabilities for various scoreboard types (specifically hackerdom and forcad), performance graphs for all teams with automatic scaling, and alerts via Telegram for significant events like flag loss and position changes. Additionally, it offers predictive analytics for scoring trends based on past performance and can be easily deployed using Docker.
03 Aug 2026
Python
★ 87
awd-frame is a Capture The Flag (CTF) framework designed to automate manual tasks during competitions, aiming to improve efficiency and maintain focus. It allows for batch SSH logins, password modifications, and command executions, along with semi-automated attack capabilities utilizing specified payloads and webshells for deploying backdoors. The tool supports both GET and POST methods for payload submission, although flag submission integration varies depending on competition configurations.
03 Aug 2026
Python
★ 30
Auto AWD is a tool designed to automate the execution of payloads and submission of flags to a platform during competitive scenarios. Its primary use case is in automated gameplay for challenges or competitions, allowing users to configure game rules through a YAML file. Notable features include cross-platform compatibility (Windows, Linux, macOS) and an easy setup process using Python and pip.
03 Aug 2026
Python
★ 154
Ancypwn is a CTF pwnable challenges environment helper that leverages Docker to provide a modular and isolated setup for debugging and exploiting vulnerabilities. It includes pre-packaged tools such as pwndbg, pwntools, and various disassemblers, with a flexible plugin system for backend and terminal options, facilitating seamless integration and execution of complex commands within a contained environment. Its primary use case is to streamline the process of interacting with CTF challenges while maintaining a consistent and manageable workspace.
03 Aug 2026
Python
★ 10
AleJndCTF is an open-source Capture The Flag (CTF) platform designed for competitive cybersecurity training, specifically in jeopardy-style formats as well as attack and defense scenarios. This tool enhances CTF event organization with features inherited from various forks of the original tinyctf-platform, enabling easy setup and customization for users. Notably, it supports scalable deployments via Flask and includes simple documentation for user guidance.