CTF Tools

A curated list of CTF frameworks, libraries, resources and softwares.

Contributing

Please take a quick gander at the contribution guidelines first.

If you know a tool that isn't present here, feel free to open a pull request.

Contents

• CTF Tools

  • Create
    • Web
    • Forensics
  • Solve
    • Attacks
    • Bruteforcers
    • Creation Tools
    • Cryptography
    • Exploits
    • Forensics
    • Miscellaneous
    • Reversing
    • Services
    • Steganography
    • Web

• Resources

  • Websites
    • Tutorials

Create

Tools used for creating CTF challenges

Forensics

Tools used for creating Forensics challenges

• Registry Dumper - Dump your registry

Web

Tools used for creating Web challenges

JavaScript Obfustcators

• Metasploit JavaScript Obfustcator
• Uglify

Solve

Tools used for solving CTF challenges

Attacks

Tools used for performing various kinds of attacks

• Layer 2 attacks - Attack various protocols on layer 2

Crypto

Tools used for solving Crypto challenges

• XORTool
• RSATool - Generate private key with knowledge of p and q

Bruteforcers

Tools used for various kind of bruteforcing (passwords etc.)

• John The Ripper
• John The Jumbo
• Ophcrack

Exploits

Tools used for solving Exploits challenges

• Metasploit - Most used penetration testing software
• pwntools - CTF Framework for writing exploits

Forensics

Tools used for solving Forensics challenges

• Audacity - Analyze sound files (mp3, m4a, whatever)
  • apt-get install audacity
• bkhive and samdump2 - Dump SYSTEM and SAM files
  • apt-get install samdump2 bkhive
• CFF Explorer - PE Editor
• creddump - Dump windows credentials
• extundelete - Used for recovering lost data from mountable images
• Foremost - Extract particular kind of files using headers
  • apt-get install foremost
• fsck.ext4 - Used to fix corrupt filesystems
• Malzilla - Malware hunting tool
• PDF Streams Inflater - Find and extract zlib files compressed in PDF files
• ResourcesExtract - Extract various filetypes from exes
• Shellbags - Investigate NT_USER.dat files
• UsbForensics - Contains many tools for usb forensics
• Volatility - To investigate memory dumps
• Wireshark - Analyze the network dumps
  • apt-get install wireshark

Registry Viewers

• RegistryViewer - Used to view windows registries
• Extra

Reversing

Tools used for solving Reversing challenges

• Androguard - Reverse engineer Android applications
• Apk2Gold - Yet another Android decompiler
• ApkTool - Android Decompiler
• BinWalk - Analyze, reverse engineer, and extract firmware images.
• Boomerang - Decompile x86 binaries to C
• IDA Pro - Ultimate solution to reversing needs
• Jadx - Decompile Android files
• Krakatau - Java decompiler and disassembler
• Revelo
• Uncompyle - Decompile Python 2.7 binaries (.pyc)

JavaScript Deobfustcators

• Detox

Services

Various kind of useful services available around the internet

• CSWSH - Cross-Site WebSocket Hijacking Tester
• Request Bin - Lets you inspect http requests to a particular url

Stegano

Tools used for solving Steganography challenges

• pngtools - For various analysis related to PNGs
  • apt-get install pngtools
• SmartDeblur Used to deblur and fix defocused images
• Steganabara
• Steghide
• Stegsolve

Web

Tools used for solving Web challenges

• SQLMap - Automatic SQL injection and database takeover tooli
• XSSer - Automated XSS testor

Resources

Where to discover about CTF

Websites

Various general websites about and on ctf

• CTF Time - General information on CTF occuring around the worlds

Writeups Collections

Collections of CTF writeups

• CTF Writeups (Community) - CTF Writeups Repos maintained by community
• Shell Storm - CTF Writeups Repo maintained by Jonathan Salwan

Tutorials

Tutorials to learn how to play CTFs