Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Categories
  3. Security
  4. CTF

CTF

The "Awesome CTF" project is a curated collection of resources focused on Capture The Flag (CTF) competitions, which are events that challenge participants to solve cybersecurity problems and vulnerabilities. This list encompasses a variety of categories including CTF platforms, write-ups, tools, training materials, and community forums, catering to both newcomers and seasoned cybersecurity enthusiasts. Whether you are looking to sharpen your skills, participate in competitions, or learn from past challenges, this repository provides invaluable insights and resources. Dive into the world of CTFs and enhance your cybersecurity prowess with the tools and knowledge available here.

ctfcybersecuritycapture-the-flaghackingsecurity-toolstrainingcompetitionswrite-ups
RSSView on GitHub
11.4k stars1.6k forks0 contributorsUpdated
Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub

Related Awesome Lists

📦
Hacking

The "Awesome Hacking" project is a curated resource list designed for those interested in the field of hacking, which involves exploring and exploiting vulnerabilities in computer systems and networks. This list encompasses a wide range of categories, including penetration testing tools, ethical hacking tutorials, security research papers, and community forums. It serves as a valuable resource for beginners looking to learn the basics of cybersecurity, as well as experienced professionals seeking advanced techniques and tools. Whether you are aiming to enhance your skills or stay updated on the latest security trends, this collection offers a wealth of information to support your hacking journey.

16.1k
📦
Security

The "Awesome Security" project is a curated collection of resources focused on enhancing security practices in the digital realm. This list encompasses a wide range of categories including security tools, libraries, frameworks, tutorials, and best practices for various platforms and technologies. It is designed to benefit security professionals, developers, and system administrators alike, providing valuable insights and tools to safeguard applications and data. Whether you are a beginner looking to understand security fundamentals or an experienced practitioner seeking advanced techniques, this project offers a wealth of information to help you improve your security posture and protect your digital assets.

14.2k
📦
Malware Analysis

The "Awesome Malware Analysis" project is a curated resource list designed to assist security professionals and researchers in the field of malware analysis. Malware analysis involves examining malicious software to understand its behavior, functionality, and impact. This list includes tools for static and dynamic analysis, reverse engineering resources, malware databases, and educational materials such as tutorials and courses. It is valuable for both beginners looking to learn the basics and experienced analysts seeking advanced techniques and tools. Users can find a wealth of resources to enhance their skills and improve their malware analysis capabilities.

13.6k
📦
Web Security

The "Awesome Web Security" project is a curated collection of resources focused on the security of web applications and services. Web security encompasses practices and technologies designed to protect websites and online services from cyber threats, vulnerabilities, and attacks. This list includes tools for penetration testing, secure coding practices, frameworks, libraries, and educational materials such as articles and tutorials. It is valuable for developers, security professionals, and researchers who seek to enhance their understanding of web security and implement robust security measures. Users can find essential tools and knowledge to safeguard their web applications effectively and stay ahead of potential threats.

13.2k

Table of Contents

18 sections · 219 projects

Platforms

14 projects
CTFd
CTFd

A customizable, easy-to-use Capture The Flag framework for running cybersecurity competitions.

Python6,88920 hours ago
echoCTF.RED
echoCTF.RED

An open-source platform for developing, running, and administering Capture the Flag (CTF) competitions on real IT infrastructure.

PHP1512 days ago
FBCTF
FBCTF

An open-source platform for hosting Jeopardy and King of the Hill style Capture the Flag competitions.

Hack6,5402 years ago
Haaukins
Haaukins

A highly accessible and automated virtualization platform for security education and capture-the-flag exercises.

Go1982 days ago
HackTheArch
HackTheArch

A free open-source Ruby on Rails scoring server for cyber Capture the Flag competitions with dynamic hints and web-based challenge management.

Ruby733 years ago
Mellivora
Mellivora

A lightweight, fast, and scalable CTF (Capture The Flag) competition engine written in PHP.

PHP4512 years ago
MotherFucking-CTF
MotherFucking-CTF

A minimalist, JavaScript-free CTF platform inspired by motherfuckingwebsite.com, designed for simplicity and lightweight hosting.

Python527 years ago
NightShade
NightShade

A simple security capture the flag framework designed to make running your own contests as easy as possible.

JavaScript1279 years ago
OpenCTF
OpenCTF
Python853 years ago
PicoCTF
PicoCTF

A deprecated open-source platform for hosting Capture The Flag (CTF) competitions, originally used for picoCTF 2019.

Python3152 years ago
PyChallFactory
PyChallFactory

A framework to create, build, deploy, and monitor jeopardy CTF challenges with configurable structure and automation.

Python1181 year ago
RootTheBox
RootTheBox

A real-time capture the flag (CTF) scoring engine and game manager for cybersecurity wargames.

Python1,1381 month ago
Scorebot
Scorebot
Python519 years ago
SecGen
SecGen

A framework that generates randomly vulnerable virtual machines for security education, labs, and CTF events.

Python2,7991 day ago

Attacks

2 projects
Bettercap
Bettercap

A portable, extensible framework for network reconnaissance and MITM attacks on WiFi, BLE, HID, CAN-bus, IPv4, and IPv6 networks.

Go20,1732 months ago
Yersinia
Yersinia

A framework for performing and analyzing layer 2 network protocol attacks, including STP and CDP.

C8773 years ago

Crypto

9 projects
CyberChef
gchq.github.io
FeatherDuster
FeatherDuster

An automated, modular cryptanalysis tool for identifying and exploiting weak cryptosystems.

Python1,1414 years ago
Hash Extender
Hash Extender

A command-line utility for performing hash length extension attacks against vulnerable cryptographic hash functions.

C1,2131 year ago
padding-oracle-attacker
padding-oracle-attacker

A CLI tool and library for executing padding oracle attacks with concurrent network requests and an elegant UI.

TypeScript2213 years ago
PkCrack
unix-ag.uni-kl.de
QuipQuip
quipqiup.com
RSACTFTool
RSACTFTool

A multi-attack RSA tool for CTF challenges that decrypts data from weak public keys and recovers private keys.

Python7,19011 days ago
RSATool
RSATool

A Python tool for calculating RSA and RSA-CRT cryptographic parameters and generating OpenSSL-compatible keys.

Python1,6773 months ago
xortool
xortool

A Python tool for analyzing and breaking multi-byte XOR ciphers by guessing key length and content.

Python1,4921 year ago

Bruteforcers

8 projects
Hashcat
hashcat.net
Hydra
tools.kali.org
John The Jumbo
John The Jumbo

An advanced offline password cracker supporting hundreds of hash and cipher types across multiple platforms.

C13,80611 days ago
John The Ripper
openwall.com
Nozzlr
Nozzlr

A modular, script-friendly multithreaded bruteforce framework for penetration testing and security auditing.

Python653 years ago
Ophcrack
ophcrack.sourceforge.net
Patator
Patator

A multi-threaded Python brute-forcing tool with a modular design for reliable and flexible password guessing attacks.

Python3,9361 year ago
Turbo Intruder
portswigger.net

Exploits

9 projects
DLLInjector
DLLInjector
C++50213 years ago
libformatstr
libformatstr

A Python library for generating format string exploitation payloads in binary exploitation and CTF challenges.

Python3465 years ago
Metasploit
metasploit.com
Cheatsheet
comparitech.com
one_gadget
one_gadget

A command-line tool that finds one-gadget RCE (execve('/bin/sh')) offsets in libc binaries for CTF pwn challenges.

Ruby2,3627 days ago
Pwntools
Pwntools

A Python CTF framework and exploit development library designed for rapid prototyping and security research.

Python13,7901 day ago
Qira
Qira

A QEMU-based interactive runtime analyzer for dynamic binary analysis and reverse engineering.

C4,0724 years ago
ROP Gadget
ROP Gadget

A tool to search for ROP gadgets in binary files to facilitate Return-Oriented Programming exploitation.

Python4,5064 months ago
V0lt
V0lt

A Python toolkit for security Capture The Flag (CTF) challenges, providing utilities for crypto, shellcodes, and network connections.

Python3708 years ago