awesome-ctf/README.md
Amanpreet Singh 9dba070af9 Add creddump
2015-03-22 01:00:50 +05:30

2.6 KiB

#CTF Tools

Since I lost my laptop a month back, with that I lost all the collection of my important CTF solving softwares and tools. It takes time to build up the collection. So I am adding them all here, just in case.

If you know a tool that isn't present here, feel free to open a pull request.

In case of tools/repos with huge code, I will add tool title and description to readme only.

Requirements

  • java
  • python

List

  • Stegano

    • Stegsolve
    • Steganabara
    • Steghide
    • pngtools - For various analysis related to PNGs
      • apt-get install pngtools
    • SmartDeblur Used to deblur and fix defocused images
  • Crypto

    • XORTool
  • Forensics

    • Volatility - To investigate memory dumps
    • Shellbags - Investigate NT_USER.dat files
    • Foremost - Extract particular kind of files using headers
      • `apt-get install foremost
    • Wireshark - Analyze the network dumps
      • apt-get install wireshark
    • Audacity - Analyze sound files (mp3, m4a, whatever)
      • apt-get install audacity
    • extundelete - Used for recovering lost data from mountable images
    • fsck.ext4 - Used to fix corrupt filesystems
    • RegistryViewer - Used to view windows registries
    • bkhive and samdump2 - Dump SYSTEM and SAM files
    • creddump - Dump windows credentials
    • UsbForensics - Contains many tools for usb forensics
  • Bruteforcers

    • John The Ripper
    • John The Jumbo
    • Ophcrack
  • Reversing

    • Krakatau - Java decompiler and disassembler
    • IDA Pro - Ultimate solution to reversing needs
    • Uncompyle - Decompile Python 2.7 binaries (.pyc)
    • JavaScript Deobfustcators
      • Detox
      • Malzilla
      • Revelo
      • Further you can put a breakpoint before return statement in debuggers to find the final code to be executed

Tools used for creation

  • JavaScript Obfustcators

    • Metasploit JavaScript Obfustcator
    • Uglify
  • Registry Dumper - Dump your registry