hackref is a minimal, fast field manual for Capture The Flag (CTF) beginners and cybersecurity competitors. It organizes essential concepts, techniques, tools, and command cheatsheets across 9 key CTF domains into concise, actionable guides.
🌐 Live Website: hackref.shovon.bd
- 🎯 9 Core CTF Domains: Comprehensive field guides covering:
- 🌐 Web Exploitation: SQLi, XSS, Command Injection, SSRF, JWT, File Inclusion, and 403 Bypasses.
- 🔐 Cryptography: RSA attacks, Classical Ciphers, XOR, Hash Length Extension, and Padding Oracle.
- ⚙️ Reverse Engineering: Static & dynamic analysis, GDB/pwndbg basics, and Ghidra decompilation.
- 💥 Binary Exploitation (Pwn): Buffer overflows, ROP chains, format strings, and shellcode.
- 🔍 Forensics: Memory dump analysis (Volatility), PCAP packet analysis, and file carving (Binwalk).
- 🕵️ OSINT: Username enumeration, domain recon, and metadata extraction.
- 🖼️ Steganography: LSB extraction, audio stego, and hidden image bit-plane analysis.
- 📡 Networking: Wireshark packet dissection, Nmap scanning, and network protocols.
- 🧩 Misc: Esoteric languages, jailbreaks, and zip password cracking.
- 🧰 Curated Tools Directory: Indexed collection of essential CTF tools (
sqlmap,pwntools,gdb,radare2,zsteg, etc.) with direct repo links. - ⚡ Blazing Fast Performance: Built with Astro for zero-JS baseline HTML, styled with Tailwind CSS v4.
- 🔍 Static Search: Powered by Pagefind for instant client-side full-text search across all guides.
- 📡 RSS & Sitemap: Built-in RSS feed (
/rss.xml) and automated XML sitemap generation.
hackref/
├── public/ # Static assets & web manifest
├── src/
│ ├── components/ # UI components (Header, Footer, Sidebar, Icons, Badges)
│ ├── content/
│ │ ├── categories/ # Category metadata (web, crypto, rev, pwn, etc.)
│ │ └── articles/ # Markdown field guides & tutorials
│ ├── data/ # Tools directory dataset
│ ├── layouts/ # Page layouts (Layout.astro, DocsLayout.astro)
│ ├── lib/ # Utility functions & content helpers
│ ├── pages/ # Astro routes (/categories, /articles, /tools, rss.xml)
│ └── content.config.ts # Astro Content Collections schema definitions
├── package.json
└── astro.config.mjs # Astro configuration & integrations
- Node.js:
>= 22.12.0 - pnpm:
>= 9.0.0
-
Clone the repository:
git clone https://github.com/sh00von/hackref.git cd hackref -
Install dependencies:
pnpm install
-
Start the development server:
pnpm dev
Open
http://localhost:4321in your browser. -
Build for production:
pnpm build
-
Preview production build:
pnpm preview
Contributions are welcome! If you find a typo, want to expand an existing guide, or want to add a new CTF tool:
- Fork the repository.
- Create a feature branch (
git checkout -b guide/new-web-technique). - Commit your changes (
git commit -m 'Add XXE vulnerability guide'). - Push to the branch (
git push origin guide/new-web-technique). - Open a Pull Request.
If you find hackref helpful for your CTF journey or security practice, please consider leaving a Star on GitHub — it helps others discover the project!
Created by Md. Minaruzzaman Shovon. Open source under the MIT License.