CTF Community | Hints

Binary Exploitation: Format String Vulnerabilities https://medium.com/swlh/binary-exploitation-format-string-vulnerabilities-70edd501c5be @ctfplay #Exploit

https://github.com/cyc10n3/WPScan_Web_Interface #Web #Tools @ctfplay

Fast web fuzzer written in Go https://github.com/ffuf/ffuf #Web @ctfplay

Reverse engineering and modifying an Android game (.apk) — CTF Recently it has been solved a CTF style challenge where the user was given an .apk file with the goal to find the flag. if you are interested in Android follow this Tutorial #Android @ctfplay

Mobile Securit Framework (MobSF) v3 (released in December 2019) -OWASP Mobile Top 10 2016 is supported -iOS & Android Analysis improved http://mobsf.github.io/Mobile-Security-Framework-MobSF/changelog.html #Android @ctfplay

Heavy-duty and Advanced Cross Site Scripting Scanner https://github.com/haroonawanofficial/XSS-Finder #Web #XSS @ctfplay

Full Account Takeover (Android Application) https://medium.com/@vbharad/full-account-takeover-android-application-78fa922f78c5 #Android @ctfplay

Assembled Labeled Library for Static Analysis Research (only slides yet) https://github.com/JHUAPL/ALLSTAR #reverse @ctfplay

Performing Linux Forensic Analysis and Why You Should Care! Workshop https://github.com/ashemery/LinuxForensics #Linux #Forensics #Blueteam @ctfplay

https://github.com/orangetw/My-CTF-Web-Challenges #CTF_Challenges #Web @ctfplay

https://github.com/DominicBreuker/stego-toolkit #Stegano #Tools @ctfplay

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis https://github.com/sh4hin/Androl4b #Mobile #Android #RE @ctfplay

Hacking XML Data Obtaining illegal data access using XPATH injections https://medium.com/swlh/hacking-xml-data-a64c870b0988 #Xpath #injection #web @ctfplay

Frida/QBDI Android API Fuzzer Experimetal fuzzer is meant to be used for API in-memory fuzzing on Android. https://github.com/andreafioraldi/frida-qbdi-fuzzer #android #api #tools @ctfplay

pyt A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications https://github.com/python-security/pyt #Tools #pentesting @ctfplay

CORS Misconfiguration Scanner https://github.com/s0md3v/Corsy #cors #misconfiguration @ctfply

https://github.com/SECFORCE/sparta #tools #pentesting #Network @ctfplay

Same-Origin Policy And Cross-Origin Resource Sharing https://blog.hackedu.io/same-origin-policy-and-cross-origin-resource-sharing/ #CORS #Web @ctfplay

HackTheBox CTF Cheatsheet This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty. This list contains all the Hack The Box writeups available on hackingarticles. https://github.com/Ignitetechnologies/HackTheBox-CTF-Writeups #ctf #cheatsheet @ctfplay