Some Useful Tools and Resources for CTF's|

home . tools and resources

Cryptography

Online tools to crack hashes, encoding/decoding, etc..

  1. Good site to crack hashes: Crackstation
  2. Best site to do all hard work: CyberChef
  3. Good site for ciphers: dcode
  4. Best site to break vigenere ciphers(Change the language to 'English'): Vigenere Solver
  5. Another site for substitution ciphers: quipqiup
  6. Brainfuck interpreter: Brainfuck Language
  7. Malbolge interpreter: Malbolge

OSINT

Online tools for osint.

  1. DNS information: ViewDNS.info
  2. Wayback machine: archive.org
  3. Whois lookup: ICANN Lookup
  4. Username enumeration: whatsmyname.app
  5. OSINT blog: osintcurio.us

Steganography

Command line tools like:

  1. Steghide, tool to hide/extract messages in/from images and audio files particularly JPEG and WAV files. (Can be installed from package managers of popular distributions)
  2. Zsteg, tool to detect hidden data in PNG and BMP files.
  3. Binwalk, is a firmware extracting tool. Mostly used to extract hidden data from images for Steganography. (Pre-installed or install from your package manager)
  4. Strings, is a command line tool (Pre-installed) used to print out all the readable strings inside a file, binary, etc.. Pretty useful most of the times.
  5. Hexeditor, tool to manipulate binary data in hexadecimal form (Mostly to fix file headers). There are tons of hexeditors out there, go pick your choice.

Reverse Shells

List of usefull reverse shells.

  1. Reverse Shell Cheatsheet. Different reverse shells for popping a shell.
  2. PHP-Reverse-Shell. Extremly usefull when you have an option to upload a file.

Cheatsheets

List of usefull cheatsheets for some tools.

  1. Tmux, it is a terminal multiplexer for Unix-like operating systems. It allows multiple terminal sessions to be accessed simultaneously in a single window.
  2. Regular Expressions (or Regex) are patterns of text that you define to search documents and match exactly what you're looking for.