PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CTF Toolkit: Personal Repository for CTF Challenges, Payloads, and Cheatsheets

github.com | tool | #open-source | #ctf | #privilege-escalation | #red-team | #reverse-engineering | #payloads | #toolkit | #wordlists | #webshells
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A GitHub repo packaging a personal CTF toolkit: setup installs SecLists, rockyou.txt, PayloadsAllTheThings, PEASS-ng scripts, webshells and static binaries, with cheatsheets for challenge work.

Why it matters

Offers a clean, organized reference architecture and automated tool-bootstrap script for CTF competitors, penetration testers, and security researchers.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
tool · github.com
SuperGhidra: High-Performance Python Suite for Accelerated Ghidra Reverse Engineering
Drastically accelerates automated binary analysis and provides reliable mathematical verification for neural decompilers, bridging traditional reverse engineering with AI-driven workflows.
tool · github.com
KillerLand: Weaponized BYOVD Process Killer Collection Bypassing PPL & EDR Protections
Demonstrates how untrusted kernel IOCTL interfaces in signed OEM and vendor drivers continue to undermine Windows PPL security boundaries, enabling red teams to blind modern endpoint detection.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
Back