30 open-source projects similar to ctf-wiki/ctf-challenges, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
This project serves as a comprehensive cybersecurity training platform and resource repository focused on web application security. It functions as a centralized hub for security practitioners, providing both a curated collection of technical documentation and research, and a system for deploying isolated, containerized environments to practice security analysis and exploitation techniques. The platform distinguishes itself by integrating automated data aggregation with hands-on, container-based orchestration. It maintains a current knowledge base of industry research and digital threats whil
This project is a capture the flag platform and cybersecurity training environment. It provides a framework for deploying security challenges and tracking participant progress through a real-time scoring leaderboard. The platform serves as a security competition scoreboard and management system, hosting intentionally vulnerable infrastructure for practicing reverse engineering and software exploitation techniques. It manages the discovery of secret strings within these puzzles to determine team rankings. The system covers cybersecurity competition management, security challenge deployment, a
Juice Shop is a self-contained web application designed as a platform for cybersecurity education and security training. It functions as a controlled environment containing intentional security flaws, allowing users to practice offensive security techniques and defensive coding practices while tracking their progress through a live scoreboard. The platform serves as an industry-standard benchmark for evaluating the effectiveness and detection accuracy of automated security scanning tools. By hosting a standardized set of known vulnerabilities and common attack patterns, it provides a reliable
Hacker Roadmap is a community-driven repository that functions as a structured learning path and resource directory for cybersecurity and ethical hacking. It organizes complex security concepts into sequential modules, guiding users from fundamental knowledge to advanced technical exploitation skills through a curated collection of educational materials and professional development resources. The project distinguishes itself by acting as a centralized index that maps specialized third-party security software and isolated training environments to specific operational use cases. By aggregating
This project is a technical reference knowledge base and developer cheat sheet repository. It functions as a searchable collection of quick-reference guides, CLI command patterns, and code snippets for various operating systems, cloud platforms, and infrastructure tools. The system operates as a markdown-based technical knowledge base, where content is stored in plain text files and rendered as a static site. This approach enables a personal knowledge management system that utilizes version control and a directory-based navigation hierarchy to organize technical notes for long-term retrieval.
Mythril is an Ethereum Virtual Machine smart contract security analyzer that uses symbolic execution to identify vulnerabilities in bytecode before deployment. It functions as a vulnerability scanner and formal auditor, treating program inputs as mathematical symbols to prove the presence of bugs in contract logic. The tool performs bytecode-level analysis to detect flaws that may be hidden by high-level compilers. It integrates SMT solvers to determine if specific vulnerability states are reachable and compares symbolic execution traces against a library of known security flaw signatures. T
A courseware built on the belief that anyone can learn foundational cloud engineering skills with the right guide and discipline
upload-labs is a file upload vulnerability lab and penetration testing sandbox. It consists of a collection of intentionally vulnerable web applications designed for practicing the discovery and exploitation of file upload security flaws. The project serves as a web security training ground and cybersecurity education lab. It provides a simulated environment for learning how to bypass upload restrictions and achieve remote code execution on servers through controlled laboratory exercises. The system includes capabilities for vulnerability research simulation and penetration testing practice.
Metasploitable3 is an automated virtual machine provisioner designed to build and deploy operating system images with intentional security weaknesses. It functions as a penetration testing lab by creating vulnerable virtual machine targets used for security training, exploit development, and the validation of security tools. The system uses configuration scripts to inject vulnerabilities into Windows and Linux environments. This includes the deployment of insecure applications and services, such as web servers and databases, and the application of misconfigured system permissions to simulate
sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for practicing the identification and exploitation of SQL injection vulnerabilities. It serves as a cybersecurity education lab where users can experiment with database exploits in a controlled setting. The environment provides specialized modules for testing a wide range of attack vectors, including error-based, boolean-blind, and time-based injections. It specifically covers advanced techniques such as second-order injections, stacked queries, and attacks targeting HTTP headers. The pro
DVWA is a vulnerable web application lab and penetration testing sandbox designed to simulate common security flaws. It serves as a training platform for the OWASP Top 10 security risks and functions as a PHP and MySQL security lab for practicing the identification and exploitation of web vulnerabilities. The project provides a graduated learning experience through configurable security levels that adjust the difficulty of the vulnerabilities. It also supports switching between different database engines to research how various storage systems respond to injection attacks. The application is
Ethical-Hacking-Labs is a comprehensive cybersecurity training curriculum and lab suite designed for learning penetration testing, network analysis, and offensive security techniques. It provides a structured environment for practicing the full attack lifecycle, from initial reconnaissance and scanning to exploitation and post-compromise analysis. The project provides instructional materials and guided exercises that cover specific technical domains, including open source intelligence research and network security courseware. It includes a practical workbook for identifying system vulnerabili
This project serves as a centralized, community-driven repository of technical knowledge and administrative resources. It provides a structured taxonomy that aggregates disparate information into a searchable framework, supporting continuous learning and rapid problem-solving for system administrators and cybersecurity practitioners. By mapping resources across offensive security, infrastructure management, and software development, it offers a unified path for skill acquisition and professional reference. The project is defined by a command-line-first design philosophy, prioritizing terminal
Ghostwriter is a distraction-free markdown text editor and document processor. It provides a focused writing environment for composing documents using markdown syntax, separating the drafting process from final formatting. The application features a minimalist interface designed to minimize visual clutter, including the ability to disable deletion keys to enforce a forward-only drafting flow. It includes a live statistics dashboard for tracking word counts and session metrics, as well as visual highlighting that fades non-active text to focus attention on the current line, sentence, or paragr
This project is a collection of standardized markdown layouts and component libraries used to organize project documentation, user profiles, and technical diagrams. It provides predefined templates for creating professional GitHub profile pages and structured documentation for open source projects, including guides for installation, usage, and contribution. The library features specialized templates for rendering flowcharts and sequence diagrams using text-to-visual syntax. It also includes a system for integrating dynamic profile statistics and status cards that automatically display user co
Standard README is a markdown documentation standard and specification designed to organize project metadata and instructions. It functions as an open source governance framework that establishes a formal set of rules and templates to ensure project information remains predictable and consistent across different repositories. The project provides a documentation compliance validator to check if a README complies with these predefined formatting standards. It includes tools for README template generation to produce baseline documentation files and a system for signaling specification complianc
hashsigs-solidity is a cryptographic signature library and security utility for Ethereum smart contracts. It functions as a hash-based signature verifier designed to confirm data origin and integrity within a virtual machine environment. The project focuses on on-chain cryptographic authentication, specifically the verification of one-time signatures to prevent replay attacks. It implements signature validation for Winternitz One-Time Signatures Plus to ensure that data has not been tampered with before it is processed by a contract. The library covers a broad range of cryptographic capabili
libsignal is a cryptographic library that implements the Signal Protocol, providing the core primitives for end-to-end encrypted messaging with forward secrecy and deniable authentication. It includes the Double Ratchet algorithm for iteratively deriving fresh encryption keys per message, and the X3DH key agreement protocol for establishing shared secrets between parties asynchronously. A session state machine maintains cryptographic state across message exchanges, supporting recovery and out-of-order delivery. The library extends beyond basic messaging encryption with capabilities such as ze
🎓 Because Education should be free. Contributions welcome! 🕵️
This project is a comprehensive cybersecurity knowledge repository that provides a structured collection of technical documentation, training materials, and professional development roadmaps. It serves as a centralized resource for practitioners to navigate complex security disciplines, ranging from offensive and defensive fundamentals to specialized infrastructure and application security. The repository distinguishes itself through a modular resource framework that enables users to construct isolated cyber range environments for hands-on practice. It also features a specialized reference gu
90DaysOfCyberSecurity is an open-source educational repository that provides a structured ninety-day learning roadmap for individuals pursuing a career in the security industry. The project organizes foundational security concepts, technical skills, and professional development tasks into a sequential, day-by-day curriculum designed for self-paced study. The repository functions as a community-driven knowledge base, leveraging version control to allow contributors to expand the curriculum with new tutorials, case studies, and study materials. It distinguishes itself by integrating a professio
Signal-Desktop is a cross-platform messaging application that provides end-to-end encrypted communication. It implements the Signal Protocol to secure messages and voice calls, ensuring that only intended recipients can access content. The application manages asynchronous key exchange and session initialization to maintain secure communication channels between parties who are not online simultaneously. The project distinguishes itself through advanced cryptographic protections, including hybrid post-quantum security that combines classical elliptic curve cryptography with lattice-based algori
Signal-Android is an end-to-end encrypted messaging platform designed to ensure that only the sender and recipient can access communication content. The project provides a comprehensive framework for secure, asynchronous message initiation and key agreement, allowing users to establish private channels without requiring simultaneous online presence. It relies on a state machine architecture to manage communication epochs and authentication, ensuring consistent security transitions throughout the messaging lifecycle. The platform distinguishes itself through a hybrid cryptographic approach tha
Signal-iOS is an encrypted messaging client that provides secure communication for voice calls, media, and text. It functions as a complete implementation of the Signal Protocol, utilizing end-to-end encryption to ensure that only intended recipients can access transmitted data. The application distinguishes itself through the integration of advanced cryptographic standards, including the use of elliptic curve cryptography for identity verification and digital signature validation. It employs a double ratchet key exchange mechanism to rotate encryption keys for every individual message, ensur
This project is a comprehensive reference guide and cheat sheet for the Docker CLI. It provides a structured collection of commands and documentation to help users manage container lifecycles, build images, and handle registries. The documentation specifically covers the orchestration of multi-container applications using Docker Compose and the management of scalable services across multiple nodes via Docker Swarm. It also includes detailed guides for configuring virtual networks, bridges, and ports to control container communication. The reference surface extends to container image administ
This project serves as a comprehensive reference and directory for lightweight markup languages, providing a centralized resource for learning syntax and discovering software tools. It functions as a foundational guide for authors and developers, offering detailed documentation on how to structure plain text for web and print publishing. The resource distinguishes itself by cataloging a wide range of software applications and editors, allowing users to evaluate tools based on their specific syntax support and functional capabilities. Beyond basic syntax, it covers advanced formatting techniqu
This project is a comprehensive Git command reference guide and version control cheat sheet. It serves as a technical directory of terminal syntax and functional workflows organized as markdown documentation. The documentation is structured to map specific commands to development lifecycle stages, providing detailed guidance on implementing feature workflows, managing production releases, and executing critical hotfixes. The reference covers a broad range of version control capabilities, including repository initialization, branch and merge management, remote synchronization, and project his
This project is a curated directory and index of resources for Solidity smart contract development. It provides a categorized collection of libraries, development frameworks, security tools, and educational materials used to build and deploy decentralized applications. The repository functions as a comprehensive catalog for the software development lifecycle, featuring a specific index of community-vetted modular building blocks and token standard implementations. It also maintains a dedicated list of security resources, including static analyzers and fuzzers, to assist in auditing and securi
This project is a Sass CSS framework boilerplate and design system template. It provides a structured project starter for organizing styles using a modular architecture that separates global defaults and components to maintain a scalable stylesheet layout. The framework includes a responsive layout system that manages screen widths via mapping functions to ensure consistent behavior across different device sizes. It utilizes reusable style rules, dynamic loops, and conditional styling logic to automate the generation of repetitive CSS rules. The system covers stylesheet segmentation through