#CTF Tools

Since I lost my laptop a month back, with that I lost all the collection of my important CTF solving softwares and tools. It takes time to build up the collection. So I am adding them all here, just in case.

If you know a tool that isn't present here, feel free to open a pull request.

In case of tools/repos with huge code, I will add tool title and description to readme only.

Requirements

• java
• python

List

• Stegano

  • Stegsolve
  • Steganabara
  • Steghide
  • pngtools - For various analysis related to PNGs
    • apt-get install pngtools
  • SmartDeblur Used to deblur and fix defocused images

• Crypto

  • XORTool

• Forensics

  • Volatility - To investigate memory dumps
  • Shellbags - Investigate NT_USER.dat files
  • Foremost - Extract particular kind of files using headers
    • `apt-get install foremost
  • Wireshark - Analyze the network dumps
    • apt-get install wireshark
  • Audacity - Analyze sound files (mp3, m4a, whatever)
    • apt-get install audacity
  • extundelete - Used for recovering lost data from mountable images
  • fsck.ext4 - Used to fix corrupt filesystems
  • RegistryViewer - Used to view windows registries
    • More registry viewers
  • bkhive and samdump2 - Dump SYSTEM and SAM files
  • creddump - Dump windows credentials
  • UsbForensics - Contains many tools for usb forensics

• Bruteforcers

  • John The Ripper
  • John The Jumbo
  • Ophcrack

• Reversing

  • Krakatau - Java decompiler and disassembler

  • IDA Pro - Ultimate solution to reversing needs

  • Uncompyle - Decompile Python 2.7 binaries (.pyc)

  • JavaScript Deobfustcators

    • Detox
    • Malzilla
    • Revelo
    • Further you can put a breakpoint before return statement in debuggers to find the final code to be executed

  • BinWalk - Analyze, reverse engineer, and extract firmware images.

  • Jadx - Decompile Android files

  • ApkTool - Android Decompiler

  • apk2Gold - Yet another Android decompiler

  • Boomerang - Decompile x86 binaries to C

• Web

  • XSSer - Automated XSS testor
  • SQLMap - Automatic SQL injection and database takeover tooli

• Exploits

  • Metasploit - Most used penetration testing software
  • pwntools - CTF Framework for writing exploits

Services

• Request Bin - Lets you inspect http requests to a particular url
• CSWSH - Cross-Site WebSocket Hijacking Tester

Tools used for creation

• JavaScript Obfustcators

  • Metasploit JavaScript Obfustcator
  • Uglify

• Registry Dumper - Dump your registry