Common-CTF-Challenges - 常见的CTF挑战是一系列工具和

项目说明

Common CTF Challenges

Reference notes, commands, and ready-to-use snippets for Capture the Flag competitions. Keep it locally, search fast, and copy what you need mid-challenge.

Table of Contents

Categories

| Category | Description | Scripts | Status |
|----------|-------------|:-------:|:------:|
| crypto/ | Ciphers, RSA attacks, encoding schemes | 13 | Complete |
| pwn/ | Binary exploitation, ROP, format strings | 22 | Complete |
| web/ | SQLi, XSS, SSTI, SSRF, XXE, CSRF | 8 | Complete |
| reverse/ | Angr, Z3, GDB scripts, Frida hooks | 12 | Complete |
| forensics/ | Disk, memory, PCAP analysis | 4 | Complete |
| network/ | ARP spoofing, MITM, Scapy | 1 | Complete |
| mobile/ | APK re, Frida, SSL pinning bypass | - | Complete |
| crack/ | Hashcat, John, password cracking | - | Complete |
| cloud/ | AWS S3, Firebase exploitation | - | Complete |
| osint/ | Username hunting, EXIF, Google dorking | - | Complete |
| web3/ | Smart contract | - | Complete |
| steganography/ | Image/audio steg tools | - | Complete |
| esolangs/ | Brainfuck, Malbolge, Whitespace | - | Complete |
| misc/ | QR recovery, DTMF, Git extraction | - | Complete |
| machine/ | Linux privesc, enumeration | - | Complete |
| jailbreak/ | Sandbox escapes, restricted shells | - | Complete |

Quick Start

Usage

During a CTF

1. Identify the category - Jump into the matching folder
2. Scan for payloads - Check README.md for quick references
3. Search for specific techniques - Use grep or rg
4. Run scripts if needed - Most are standalone Python

Search Examples

Running Scripts

Directory Structure

Contributing

See CONTRIBUTING.md for guidelines on:

Notes

项目信息

开发语言：Python

Star 数：148

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Common CTF Challenges is a collection of tools and resources to help individuals improve their Capture the Flag (CTF) skills. Cover a wide range of challenges, from cryptography to reverse engineering.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。