Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Categories
  3. Security
  4. CTF

CTF

The "Awesome CTF" project is a curated collection of resources focused on Capture The Flag (CTF) competitions, which are events that challenge participants to solve cybersecurity problems and vulnerabilities. This list encompasses a variety of categories including CTF platforms, write-ups, tools, training materials, and community forums, catering to both newcomers and seasoned cybersecurity enthusiasts. Whether you are looking to sharpen your skills, participate in competitions, or learn from past challenges, this repository provides invaluable insights and resources. Dive into the world of CTFs and enhance your cybersecurity prowess with the tools and knowledge available here.

ctfcybersecuritycapture-the-flaghackingsecurity-toolstrainingcompetitionswrite-ups
RSSView on GitHub
11.4k stars1.6k forks0 contributorsUpdated
Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub

Related Awesome Lists

📦
Hacking

The "Awesome Hacking" project is a curated resource list designed for those interested in the field of hacking, which involves exploring and exploiting vulnerabilities in computer systems and networks. This list encompasses a wide range of categories, including penetration testing tools, ethical hacking tutorials, security research papers, and community forums. It serves as a valuable resource for beginners looking to learn the basics of cybersecurity, as well as experienced professionals seeking advanced techniques and tools. Whether you are aiming to enhance your skills or stay updated on the latest security trends, this collection offers a wealth of information to support your hacking journey.

16.1k
📦
Security

The "Awesome Security" project is a curated collection of resources focused on enhancing security practices in the digital realm. This list encompasses a wide range of categories including security tools, libraries, frameworks, tutorials, and best practices for various platforms and technologies. It is designed to benefit security professionals, developers, and system administrators alike, providing valuable insights and tools to safeguard applications and data. Whether you are a beginner looking to understand security fundamentals or an experienced practitioner seeking advanced techniques, this project offers a wealth of information to help you improve your security posture and protect your digital assets.

14.2k
📦
Malware Analysis

The "Awesome Malware Analysis" project is a curated resource list designed to assist security professionals and researchers in the field of malware analysis. Malware analysis involves examining malicious software to understand its behavior, functionality, and impact. This list includes tools for static and dynamic analysis, reverse engineering resources, malware databases, and educational materials such as tutorials and courses. It is valuable for both beginners looking to learn the basics and experienced analysts seeking advanced techniques and tools. Users can find a wealth of resources to enhance their skills and improve their malware analysis capabilities.

13.6k
📦
Web Security

The "Awesome Web Security" project is a curated collection of resources focused on the security of web applications and services. Web security encompasses practices and technologies designed to protect websites and online services from cyber threats, vulnerabilities, and attacks. This list includes tools for penetration testing, secure coding practices, frameworks, libraries, and educational materials such as articles and tutorials. It is valuable for developers, security professionals, and researchers who seek to enhance their understanding of web security and implement robust security measures. Users can find essential tools and knowledge to safeguard their web applications effectively and stay ahead of potential threats.

13.2k

Table of Contents

18 sections · 204 projects

Platforms

11 projects
CTFd
CTFd

A customizable, easy-to-use Capture The Flag framework for running cybersecurity competitions.

Python6,68820 days ago
echoCTF.RED
echoCTF.RED

An open-source platform for developing, running, and administering Capture the Flag (CTF) competitions on real IT infrastructure.

PHP14810 days ago
FBCTF
FBCTF

An open-source platform for hosting Jeopardy and King of the Hill style Capture the Flag competitions.

Hack6,5602 years ago
Haaukins
Haaukins

A highly accessible and automated virtualization platform for security education and capture-the-flag exercises.

Go1972 months ago
HackTheArch
HackTheArch

A free open-source Ruby on Rails scoring server for cyber Capture the Flag competitions with dynamic hints and web-based challenge management.

Ruby733 years ago
Mellivora
Mellivora

A lightweight, fast, and scalable CTF (Capture The Flag) competition engine written in PHP.

PHP4512 years ago
NightShade
NightShade

A simple security capture the flag framework designed to make running your own contests as easy as possible.

JavaScript1279 years ago
PicoCTF
PicoCTF

A deprecated open-source platform for hosting Capture The Flag (CTF) competitions, originally used for picoCTF 2019.

Python3132 years ago
PyChallFactory
PyChallFactory

A framework to create, build, deploy, and monitor jeopardy CTF challenges with configurable structure and automation.

Python1179 months ago
RootTheBox
RootTheBox

A real-time capture the flag (CTF) scoring engine and game manager for cybersecurity wargames.

Python1,1151 month ago
SecGen
SecGen

A framework that generates randomly vulnerable virtual machines for security education, labs, and CTF events.

Python2,77211 days ago

Attacks

2 projects
Bettercap
Bettercap

A portable, extensible framework for network reconnaissance and MITM attacks on WiFi, BLE, HID, CAN-bus, IPv4, and IPv6 networks.

Go19,38818 days ago
Yersinia
Yersinia

A framework for performing and analyzing layer 2 network protocol attacks, including STP and CDP.

C8482 years ago

Crypto

9 projects
CyberChef
gchq.github.io
FeatherDuster
FeatherDuster

An automated, modular cryptanalysis tool for identifying and exploiting weak cryptosystems.

Python1,1314 years ago
Hash Extender
Hash Extender

A command-line utility for performing hash length extension attacks against vulnerable cryptographic hash functions.

C1,2021 year ago
padding-oracle-attacker
padding-oracle-attacker

A CLI tool and library for executing padding oracle attacks with concurrent network requests and an elegant UI.

TypeScript2173 years ago
PkCrack
unix-ag.uni-kl.de
QuipQuip
quipqiup.com
RSACTFTool
RSACTFTool

A multi-attack RSA tool for CTF challenges that decrypts data from weak public keys and recovers private keys.

Python6,9663 days ago
RSATool
RSATool

A Python tool for calculating RSA and RSA-CRT cryptographic parameters and generating OpenSSL-compatible keys.

Python1,6121 year ago
xortool
xortool

A Python tool for analyzing and breaking multi-byte XOR ciphers by guessing key length and content.

Python1,4821 year ago

Bruteforcers

8 projects
Hashcat
hashcat.net
Hydra
tools.kali.org
John The Jumbo
John The Jumbo

An advanced offline password cracker supporting hundreds of hash and cipher types across multiple platforms.

C13,2331 day ago
John The Ripper
openwall.com
Nozzlr
Nozzlr

A modular, script-friendly multithreaded bruteforce framework for penetration testing and security auditing.

Python653 years ago
Ophcrack
ophcrack.sourceforge.net
Patator
Patator

A multi-threaded Python brute-forcing tool with a modular design for reliable and flexible password guessing attacks.

Python3,8861 year ago
Turbo Intruder
portswigger.net

Exploits

8 projects
libformatstr
libformatstr

A Python library for generating format string exploitation payloads in binary exploitation and CTF challenges.

Python3474 years ago
Metasploit
metasploit.com
Cheatsheet
comparitech.com
one_gadget
one_gadget

A command-line tool that finds one-gadget RCE (execve('/bin/sh')) offsets in libc binaries for CTF pwn challenges.

Ruby2,3245 days ago
Pwntools
Pwntools

A Python CTF framework and exploit development library designed for rapid prototyping and security research.

Python13,5336 days ago
Qira
Qira

A QEMU-based interactive runtime analyzer for dynamic binary analysis and reverse engineering.

C4,0683 years ago
ROP Gadget
ROP Gadget

A tool to search for ROP gadgets in binary files to facilitate Return-Oriented Programming exploitation.

Python4,4345 months ago
V0lt
V0lt

A Python toolkit for security Capture The Flag (CTF) challenges, providing utilities for crypto, shellcodes, and network connections.

Python3738 years ago