专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, a…

Ghidra is a software reverse engineering (SRE) framework

Java bytecode editor

Apache-Log4j漏洞复现笔记

writeups for our challenges

Damn Vulnerable NodeJS Application

A docker environment for pwn in ctf

HTTPLeaks - All possible ways, a website can leak HTTP requests

A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.

Learn AI security through a series of vulnerable LLM CTF challenges. No sign ups, no cloud fees, run everything locally on your system.