CTF Tools

A curated list of CTF frameworks, libraries, resources and softwares.

Contributing

Please take a quick gander at the contribution guidelines first.

If you know a tool that isn't present here, feel free to open a pull request.

Why?

It takes time to build up collection of tools used in ctf and remember them all. This repo helps to keep all these scattered tools at one place.

Contents

• CTF Tools

  • Create
    • Web
    • Forensics
  • Solve
    • Attacks
    • Bruteforcers
    • Creation Tools
    • Cryptography
    • Exploits
    • Forensics
    • Miscellaneous
    • Reversing
    • Services
    • Steganography
    • Web

• Resources

  • Websites
    • Tutorials

Create

Tools used for creating CTF challenges

Forensics

Tools used for creating Forensics challenges

• Registry Dumper - Dump your registry

Web

Tools used for creating Web challenges

JavaScript Obfustcators

• Metasploit JavaScript Obfustcator
• Uglify

Solve

Tools used for solving CTF challenges

Attacks

Tools used for performing various kinds of attacks

• Layer 2 attacks - Attack various protocols on layer 2

Crypto

Tools used for solving Crypto challenges

• XORTool
• RSATool - Generate private key with knowledge of p and q

Bruteforcers

Tools used for various kind of bruteforcing (passwords etc.)

• John The Ripper
• John The Jumbo
• Ophcrack

Exploits

Tools used for solving Exploits challenges

• Metasploit - Most used penetration testing software
• pwntools - CTF Framework for writing exploits

Forensics

Tools used for solving Forensics challenges

• Audacity - Analyze sound files (mp3, m4a, whatever)
  • apt-get install audacity
• bkhive and samdump2 - Dump SYSTEM and SAM files
  • apt-get install samdump2 bkhive
• CFF Explorer - PE Editor
• creddump - Dump windows credentials
• extundelete - Used for recovering lost data from mountable images
• Foremost - Extract particular kind of files using headers
  • apt-get install foremost
• fsck.ext4 - Used to fix corrupt filesystems
• Malzilla - Malware hunting tool
• PDF Streams Inflater - Find and extract zlib files compressed in PDF files
• ResourcesExtract - Extract various filetypes from exes
• Shellbags - Investigate NT_USER.dat files
• UsbForensics - Contains many tools for usb forensics
• Volatility - To investigate memory dumps
• Wireshark - Analyze the network dumps
  • apt-get install wireshark

Registry Viewers

• RegistryViewer - Used to view windows registries
• Extra

Reversing

Tools used for solving Reversing challenges

• Androguard - Reverse engineer Android applications
• Apk2Gold - Yet another Android decompiler
• ApkTool - Android Decompiler
• BinWalk - Analyze, reverse engineer, and extract firmware images.
• Boomerang - Decompile x86 binaries to C
• IDA Pro - Ultimate solution to reversing needs
• Jadx - Decompile Android files
• Krakatau - Java decompiler and disassembler
• Revelo
• Uncompyle - Decompile Python 2.7 binaries (.pyc)

JavaScript Deobfustcators

• Detox

Services

Various kind of useful services available around the internet

• CSWSH - Cross-Site WebSocket Hijacking Tester
• Request Bin - Lets you inspect http requests to a particular url

Stegano

Tools used for solving Steganography challenges

• pngtools - For various analysis related to PNGs
  • apt-get install pngtools
• SmartDeblur Used to deblur and fix defocused images
• Steganabara
• Steghide
• Stegsolve

Web

Tools used for solving Web challenges

• SQLMap - Automatic SQL injection and database takeover tooli
• XSSer - Automated XSS testor

Resources

Where to discover about CTF

Websites

Various general websites about and on ctf

• CTF Time - General information on CTF occuring around the worlds

Writeups Collections

Collections of CTF writeups

• CTF Writeups (Community) - CTF Writeups Repos maintained by community
• Shell Storm - CTF Writeups Repo maintained by Jonathan Salwan

Tutorials

Tutorials to learn how to play CTFs