Topics / #ctf-tools
Ctf-tools projects on GitHub
Toolkits for capture the flag competitions covering crypto, forensics, and exploitation.
As of , the most-starred Ctf-tools projects on GitHub are strix (69.8K stars), Ciphey (21.7K stars) and hexstrike-ai (12.9K stars). GitHub.Locker tracks 5 Ctf-tools repositories with 124.3K stars combined. The fastest-growing on October 18 was strix, with +394 stars in a day.
Hot right now
Most stars gained in a day · Oct 18
+394strix
usestrix/strix · ★ 69.8KStrix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.
+32hexstrike-ai
0x4m4/hexstrike-ai · ★ 12.9KHexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.
+16CyberStrikeAI
AIPentest/CyberStrikeAI · ★ 7.9KCyberStrikeAI is an AI-native cybersecurity platform that turns natural-language intent into governed, auditable security operations, using agents, 100+ security tools, MCP integration, and attack-chain tracking for authorized penetration testing.
+8awesome-ctf
apsdehal/awesome-ctf · ★ 11.9KA curated list of frameworks, libraries, tools, and resources for Capture The Flag (CTF) competitions, covering everything from building challenges to solving them.
The all-time top
5 projects · by stars
- 69.8K
#1 · usestrix/strixstrix
Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.
- 21.7K
#2 · bee-san/Ciphey
Ciphey
ciphey automatically decrypts ciphertext without knowing the key or cipher, decodes encodings and cracks hashes. It is the Rust-built next generation of Ciphey — roughly 7x faster per decode — and the same team intends it to fully replace the original.
- 12.9K
#3 · 0x4m4/hexstrike-aihexstrike-ai
HexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.
- 4

awesome-ctf
11.9Kapsdehal/awesome-ctf · JavaScriptA curated list of frameworks, libraries, tools, and resources for Capture The Flag (CTF) competitions, covering everything from building challenges to solving them.
- 5

CyberStrikeAI
7.9KAIPentest/CyberStrikeAI · GoCyberStrikeAI is an AI-native cybersecurity platform that turns natural-language intent into governed, auditable security operations, using agents, 100+ security tools, MCP integration, and attack-chain tracking for authorized penetration testing.
Related topics
Often tagged together
- security998
- cybersecurity249
- hacking139
- linux4,248
- python2,425
- ai-agents1,323
- ai-hacking5
- ai-penetration-testing6
- artificial-intelligence272
- llm1,516
- macos3,608
- mcp934
- open-source5,749
- penetration-testing128
- pentesting114
- pentesting-tools9
- security-tools287
- server1,469
- ai1,993
- ai-security-tool7
- cli2,275
- cross-platform2,673
- cryptography80
- ctf36