2015-02-28 11:18:21 +05:30
#CTF Tools
Since I lost my laptop a month back, with that I lost all the collection of my important CTF solving softwares and tools. It takes time to build up the collection. So I am adding them all here, just in case.
2015-02-28 11:21:44 +05:30
_If you know a tool that isn't present here, feel free to open a pull request._
2015-03-19 14:12:06 +05:30
In case of tools/repos with huge code, I will add tool title and description to readme only.
2015-03-19 13:59:59 +05:30
# Requirements
2015-02-28 11:18:21 +05:30
- java
2015-03-19 13:59:59 +05:30
- python
2015-02-28 11:18:21 +05:30
2015-02-28 11:26:24 +05:30
## List
2015-02-28 11:18:21 +05:30
- Stegano
- Stegsolve
- Steganabara
2015-03-21 07:07:06 +05:30
- [Steghide ](http://steghide.sourceforge.net/ )
2015-03-21 10:00:43 +05:30
- pngtools - For various analysis related to PNGs
- `apt-get install pngtools`
- [SmartDeblur ](https://github.com/Y-Vladimir/SmartDeblur ) Used to deblur and fix defocused images
2015-02-28 11:18:21 +05:30
- Crypto
- XORTool
2015-03-19 13:59:59 +05:30
- Forensics
2015-03-19 14:18:17 +05:30
- [Volatility ](https://github.com/volatilityfoundation/volatility ) - To investigate memory dumps
- [Shellbags ](https://github.com/williballenthin/shellbags ) - Investigate NT\_USER.dat files
2015-03-19 13:59:59 +05:30
- Foremost - Extract particular kind of files using headers
2015-03-21 10:00:43 +05:30
- `apt-get install foremost
2015-03-19 14:22:09 +05:30
- Wireshark - Analyze the network dumps
2015-03-21 10:00:43 +05:30
- `apt-get install wireshark`
2015-03-19 14:22:09 +05:30
- Audacity - Analyze sound files (mp3, m4a, whatever)
2015-03-21 10:00:43 +05:30
- `apt-get install audacity`
2015-03-21 07:50:08 +05:30
- extundelete - Used for recovering lost data from mountable images
- fsck.ext4 - Used to fix corrupt filesystems
2015-03-21 10:17:28 +05:30
- [RegistryViewer ](http://www.gaijin.at/en/getitpage.php?id=regview ) - Used to view windows registries
2015-03-21 11:07:18 +05:30
- [More registry viewers ](http://www.forensicswiki.org/wiki/Windows_Registry )
2015-03-21 11:08:03 +05:30
- bkhive and samdump2 - Dump SYSTEM and SAM files
2015-03-22 01:00:50 +05:30
- [creddump ](https://code.google.com/p/creddump/ ) - Dump windows credentials
2015-03-21 10:26:58 +05:30
- [UsbForensics ](http://www.forensicswiki.org/wiki/USB_History_Viewing ) - Contains many tools for usb forensics
2015-03-19 14:18:17 +05:30
2015-03-22 01:00:05 +05:30
- Bruteforcers
- John The Ripper
- John The Jumbo
- Ophcrack
2015-03-19 14:18:17 +05:30
- Reversing
- [Krakatau ](https://github.com/Storyyeller/Krakatau ) - Java decompiler and disassembler
2015-03-21 10:00:43 +05:30
- IDA Pro - Ultimate solution to reversing needs
2015-03-19 14:28:45 +05:30
- [Uncompyle ](https://github.com/williballenthin/shellbags ) - Decompile Python 2.7 binaries (.pyc)
2015-03-19 15:02:30 +05:30
- JavaScript Deobfustcators
- [Detox ](http://relentless-coding.org/projects/jsdetox/install )
- [Malzilla ](http://malzilla.sourceforge.net/downloads.html )
- [Revelo ](http://www.kahusecurity.com/tools/Revelo_v0.6.zip )
- Further you can put a breakpoint before return statement in debuggers to find the final code to be executed
2015-03-21 10:00:43 +05:30
2015-03-22 19:45:55 +05:30
- Web
- [XSSer ](http://xsser.sourceforge.net/ ) - Automated XSS testor
2015-03-22 19:50:35 +05:30
- [SQLMap ](https://github.com/sqlmapproject/sqlmap ) - Automatic SQL injection and database takeover tooli
2015-03-22 19:50:48 +05:30
- Exploits
- [Metasploit ](http://www.metasploit.com/ ) - Most used penetration testing software
2015-03-22 20:24:49 +05:30
### Services
- [Request Bin ](http://requestb.in/ ) - Lets you inspect http requests to a particular url
2015-03-23 17:33:33 +05:30
- [CSWSH ](http://ironwasp.org/cswsh.html ) - Cross-Site WebSocket Hijacking Tester
2015-03-19 15:02:49 +05:30
### Tools used for creation
- JavaScript Obfustcators
- Metasploit JavaScript Obfustcator
- Uglify
- [Registry Dumper ](http://www.kahusecurity.com/tools/RegistryDumper_v0.1.zip ) - Dump your registry
