Alternatives
Products that do what CTF Challenge Generator Suite does
Build jeopardy-style CTF challenges in your browser
- 1AC
Hello HN, given the recent interest in the security vulnerabilities of agentic LLM apps, we would love to hear everyone's thoughts on a Capture The Flag (CTF) challenge we built. The challenge is designed to test the robustness of LLM-based agent systems, showcasing how an attacker can extract sensitive information from the system. The challenge is part of the Invariant Summer '24 CTF series, where participants can play the challenge and compete for a prize pool of $1000. Let us know what you think and what attacks you tried. We are also open to any feedback on how we can improve with the…
2024
- 2
- 3BA
2017 · doc.bytearena.com
- 4AM
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
2025 · prompt-injector.blueprintlab.io
- 5
- 6MN
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com
- 7BC
Hi HN, I'm releasing my round one public demo of a new browser security system I've been developing. There's a real Bitcoin private key (worth $20) in plaintext at app.redactsure.com. You can copy it, paste it, delete it, move it around - full control. But you can't see the actual characters or extract them. The challenge: Break the protection and take the Bitcoin. First person wins, challenge ends. Details: - Requires email verification (prevents abuse, no account needed) - 15 minute time limit per session - Currently US only for the demo (latency) - Verify the Bitcoin is real:…
2025 · app.redactsure.com
- 8RR
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
2025 · github.com
- 9SC
2018 · blockchain-ctf.securityinnovation.com
- 10IV
Hey HN! I've been building random tools whenever I needed them over the past few months, and now I have 177 of them. Started because I was tired of sketchy converter sites with 10 ads, so I just... made my own. Some highlights for the dev crowd: Developer tools: - UUID Generator (v1/v4/v7, bulk generation): https://calcbin.com/tools/uuid-generator - JWT Generator & Decoder: https://calcbin.com/tools/jwt-generator - JSON Formatter/Validator: https://calcbin.com/tools/json-formatter - Cron Expression Generator (with…
Feb 2026 · calcbin.com
- 11
- 12SY
After countless (TRULY COUNTLESS) hours of manually seeding and resetting Salesforce sandboxes for our sales demos and integration testing, we couldn’t take it anymore. SandFaux started as an internal tool for this tedious process, but after a few customers asked for access, we decided to productize it & make it publicly available for anyone to use! This was really just the starting point for our internal tool. We want to also add: * Text Prompting for Scenarios * Custom Fields * Custom Configurations * Dynamic Data * More Integrations https://sandfaux.com
2024 · sandfaux.com
- 13
Free password generator with strength check and history
Aug 2026 · passwordgeneratortools.com
- 14SS
2023 · github.com
- 15CC
Cheatsheets could be a powerful tool for lots of people, especially a full-stack developer like me, but I hate online cheatsheets for a few reasons: 1. Most online cheatsheets are pdf files or webpages. I can't add my own stuff, nor only take the parts that are useful to me. 2. There is no easy way to search across all the cheatsheets I've collected. 3. Can't make part of a cheatsheet private, therefore, I have to delete sensitive stuff before sharing mine with others. I ended up using multiple txt files to store mine over the years which is cumbersome as well. So I built Cheaki.com. On…
2020
- 16RU
hey all, happy to share research i've been working on for islo.dev in recent months. ever since the cheating agents (https://debugml.github.io/cheating-agents/) paper came out, revealing reward hacking was 4x more prevalent than previously estimated, i've been looking into how we can deal with the issue the common approach (taken by the tbench team) is post hoc trajectory analysis. i've been interested in the idea of reframing the problem as an endpoint security problem and tackling it via sandbox i hope you find it interesting, and thanks to the islo.dev team for…
Jun 2026 · github.com
- 17AC
2016 · funcy.readthedocs.io
- 18
- 19
- 20
- 21IB
Code base is here https://github.com/clairefro/aribotle Screenshots and learnings in tweet https://twitter.com/clairefroe/status/1684692302843838464?t=... I experimented with a "Bring your own API Key" approach that I think is sufficiently secure. I'll Venmo $50 to whoever can hack my OpenAI API key
2023 · twitter.com
- 22UN
Need a fast, easy-to-use, and memorable UUID/Guid generator? Built with the power and elegance of F#! https://uuid.now is here! One-click copy Zero UUID support Browser-based (Crypto API) Fully open source Explore the source code here: https://github.com/OnurGumus/uuid.now
2024 · uuid.now
- 23
Generate passwords from real-world chaos, not Math.random()
Jun 2026 · not-another-password-generator.vercel.app
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →