4.12.5 Security testing & CTF
Every entry filed under Security testing & CTF and its subtopics.
Level
- Beginner 0
- Intermediate 1
- Advanced 0
What kind of help
- Guided project 0
- Explains an idea 0
- Step by step 1
- Cheat sheet 0
- Fixes an error 0
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
7 entries match these filters
- 0446 Semgrep: static analysis with rules you can read Semgrep is a fast static analysis tool whose rules look like the code they match, with a community registry of thousands of… Linux, macOS Repo Pipelines, runners & hooks · Security testing & CTF 15 Oct 2026
- 0448 OWASP ZAP: a web application security scanner for testing your own applications Zed Attack Proxy (ZAP) is a free web application security scanner and intercepting proxy maintained under the OWASP umbrella, used to find… Linux, macOS, Windows Repo Security testing & CTF 15 Oct 2026
- 0449 Nmap: the network mapper for inventorying your own network Nmap is the long-standing open source tool for discovering hosts, open ports, services and operating systems on a network you administer, used… Linux, macOS, Windows Repo DNS, IP addresses & ports · Security testing & CTF 15 Oct 2026
- 0444 Trivy: scan container images, file systems and infrastructure code for known problems Trivy is an open source scanner from Aqua Security that finds known vulnerabilities, misconfigurations and exposed secrets in container images, project directories,… Linux, macOS, Windows Repo Images & registries · Security testing & CTF 15 Oct 2026
- 0428 SecLists: wordlists for authorised security testing A large, maintained collection of wordlists (usernames, passwords, URLs, fuzzing strings, patterns) used in penetration tests with permission and in defensive checks… Linux, macOS Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0429 PayloadsAllTheThings: a knowledge base organised by web vulnerability class A community-maintained reference that gives each class of web and application weakness its own section with background, detection notes and remediation references,… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0430 HackTricks: a community wiki of security notes A large, continuously updated wiki of security study notes, organised like a textbook and published in GitBook style, used for learning, CTF… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026