GitHub stars · StarDay

1x64dbg / x64dbgA user-mode debugger for Windows applications.C++License not declared50,217

2bee-san / Ciphey⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡RustMIT · Permissive21,747

3vitalysim / Awesome-Hacking-ResourcesA collection of hacking / penetration testing resources to make you better!GPL-3.0 · Share derivative source17,605

4juice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · Permissive14,377

5Gallopsled / pwntoolsCTF framework and exploit development libraryPythonLicense not declared13,830

6apsdehal / awesome-ctfA curated list of CTF frameworks, libraries, resources and softwaresJavaScriptCC0-1.0 · Permissive11,972

7pwndbg / pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made EasyPythonMIT · Permissive11,158

8ctf-wiki / ctf-wikiCome and join us, we need you!PythonLicense not declared9,754

9hugsy / gefGEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on LinuxPythonMIT · Permissive8,424

10CTFd / CTFdCTFs as you need themPythonApache-2.0 · Permissive6,899

11DominicBreuker / pspyMonitor linux processes without root permissionsGoGPL-3.0 · Share derivative source6,237

12RPISEC / MBECourse materials for Modern Binary Exploitation by RPISECCBSD-2-Clause · Permissive6,099

13ffffffff0x / 1earnThe security knowledge framework maintained by the ffffffff0x team includes content that is not limited to web security, industrial control security, forensics, emergency response, blue team facility deployment, post-infiltration, Linux security, and various target drone writeups.C++License not declared5,734

14google / google-ctfThis repository lists most of the challenges used in the Google CTF since 2017, as well as most of the infrastructure that can be used to run them. **IMPORTANT** - The code in the 201x and 202x folders have unfixed security vulnerabilities. These are there on purpose, and running these on real production infrastructure is not safe.PythonApache-2.0 · Permissive5,055

15oritera / CairnCairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.PythonAGPL-3.0 · Share derivative source4,868

16firmianay / CTF-All-In-OneLearning materials and companion book resources for CTF security competitions, including Linux binary security, reverse engineering, and challenge analysis.CCC-BY-SA-4.0 · Share derivative source4,515

17ProbiusOfficial / Hello-CTF[Hello CTF] It is a free and open source CTF introductory tutorial with matching questions. It is written for novices with no basic knowledge. It also takes into account the filling of information gaps. It is an open source tutorial that is friendly to CTFers at all stages and is committed to the open source ecosystem of CTF and network security!HTMLGPL-3.0 · Share derivative source4,285

180xsyr0 / Awesome-Cybersecurity-HandbooksA huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.GPL-3.0 · Share derivative source4,165

190dayCTF / reverse-shell-generatorHosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)JavaScriptMIT · Permissive4,103

20snooppr / snoopSnoop - open data intelligence tool (OSINT world)PythonLicense not declared4,063