CTF Tools
Last updated
Last updated
A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.
A curated list of (CTF) frameworks, libraries, resources and softwares.
Please take a quick look at the first.
If you know a tool that isn't present here, feel free to open a pull request.
It takes time to build up collection of tools used in ctf and remember them all. This repo helps to keep all these scattered tools at one place.
Tools used for creating CTF challenges
Tools used for creating Forensics challenges
Tools used for creating Web challenges
JavaScript Obfustcators
Tools used for solving CTF challenges
Tools used for performing various kinds of attacks
Tools used for solving Crypto challenges
Tools used for various kind of bruteforcing (passwords etc.)
Tools used for solving Exploits challenges
Tools used for solving Forensics challenges
apt-get install aircrack-ng
apt-get install audacity
apt-get install samdump2 bkhive
apt-get install foremost
apt-get install wireshark
Registry Viewers
Tools used for solving Reversing challenges
JavaScript Deobfustcators
SWF Analyzers
Various kind of useful services available around the internet
Tools used for solving Steganography challenges
apt-get install pngtools
Tools used for solving Web challenges
Where to discover about CTF
Collections of installer scripts, useful tools
Tutorials to learn how to play CTFs
Always online CTFs
Various general websites about and on ctf
Various Wikis available for learning about CTFs
Collections of CTF write-ups
- Dump your registry
- Framework to perform MITM (Man in the Middle) attacks.
- Attack various protocols on layer 2
- A tool for Breaking PkZip-encryption
- Generate private key with knowledge of p and q
- A tool to analyze multi-byte xor cipher
- Community enhanced version of John the Ripper
- Password Cracker
- Windows password cracker based on rainbow tables.
- CTF framework and exploit development library
- Penetration testing software
- CTF Framework for writing exploits
- QEMU Interactive Runtime Analyser
- Framework for ROP exploitation
- Crack 802.11 WEP and WPA-PSK keys
- Analyze sound files (mp3, m4a, whatever)
- Dump SYSTEM and SAM files
- PE Editor
- Dump windows credentials
- Rips web accessible (distributed) version control systems
- Read, write and edit file metadata
- Used for recovering lost data from mountable images
- Extract particular kind of files using headers
- Used to fix corrupt filesystems
- Malware hunting tool
- Network Forensic Analysis Tool
- Find and extract zlib files compressed in PDF files
- Extract various filetypes from exes
- Investigate NT_USER.dat files
- Contains many tools for usb forensics
- To investigate memory dumps
- Analyze the network dumps
- Used to view windows registries
- More registry viewers
- Reverse engineer Android applications
- Yet another Android decompiler
- Android Decompiler
- Collection of binary tools
- Analyze, reverse engineer, and extract firmware images.
- Decompile x86 binaries to C
- The GNU project debugger
- Most used Reversing software
- Decompile Android files
- Java decompiler and disassembler
- A portable reversing framework
- Decompile Python 2.7 binaries (.pyc)
- Windows debugger distributed by Microsoft
- a theorem prover from Microsoft Research
- A Javascript malware analysis tool
- Analyze obfuscated Javascript code
- Collection of utilities including an ActionScript 3 assembler/disassembler.
- Collection of utilities to work with SWF files
- A Python script for analyzing Flash files.
- Cross-Site WebSocket Hijacking Tester
- Lets you inspect http requests to a particular url
- For various analysis related to PNGs
- Used to deblur and fix defocused images
- Tool for stegano analysis written in Java
- Hide data in various kind of images
- Apply various steganography techniques to images
- Automatic SQL injection and database takeover tooli
- Web Application Attack and Audit Framework.
- Automated XSS testor
- Collection of setup scripts to install various security research tools.
- Field Guide by Trails of Bits
- Start Guide maintained by community
- Short guideline for CTF beginners by Endgame
- A small course for beginners in CTFs (in Russian)
- Security Platform by SDSLabs.
- CTF All the time
- Variety of VMs to learn variety of computer security issues.
- Training ground for hackers.
- Wargame maintained by OvertheWire Community
- Ringzer0 Team Online CTF
- A variety of wargames maintained by the SmashTheStack Community.
- VM-based for practical in digital security, computer application & network administration.
- Always online challenge site.
- General information on CTF occuring around the worlds
- Reddit CTF category
- Chinese resources to learn CTF
- CTF Wiki by Isis lab
- Dumped CTF challenges and materials by psifertex
- CTF challenges + write-ups archive maintained by the community
- A collection of CTF write-ups all using pwntools
- CTF challenge archive maintained by Jonathan Salwan
- CTF write-ups repo maintained by SmokeLeetEveryday team.
