Tools used for solving CTF challenges italic Attacks Tools used for performing various kinds of attacks italic Bettercap s - Framework to perform MITM (Man in the Middle) attacks. Layer 2 attacks s - Attack various protocols on layer 2 Crypto Tools used for solving Crypto challenges italic FeatherDuster s - An automated modular cryptanalysis tool PkCrack s~conrad - A tool for Breaking PkZip-encryption RSATool s - Generate private key with knowledge of p and q XORTool s - A tool to analyze multi-byte xor cipher Bruteforcers Tools used for various kind of bruteforcing (passwords etc.) italic Hashcat s - Password Cracker John The Jumbo s - Community enhanced version of John the Ripper John The Ripper - Password Cracker Ophcrack - Windows password cracker based on rainbow tables. Exploits Tools used for solving Exploits challenges italic DLLInjector s - Inject dlls in processes libformatstr s - Simplify format string exploitation. Metasploit - Penetration testing software Pwntools s - CTF Framework for writing exploits Qira s - QEMU Interactive Runtime Analyser ROP Gadget s - Framework for ROP exploitation Vlt s - Security CTF Toolkit Forensics Tools used for solving Forensics challenges italic Aircrack-Ng - Crack WEP and WPA-PSK keys apt-get install aircrack-ng code Audacity - Analyze sound files (mp3 m4a whatever) apt-get install audacity code Bkhive and Samdump2 - Dump SYSTEM and SAM files apt-get install samdump2 bkhive code CFF Explorer - PE Editor Creddump s - Dump windows credentials DVCS Ripper s - Rips web accessible (distributed) version control systems Exif Tool ~phil - Read write and edit file metadata Extundelete - Used for recovering lost data from mountable s. Boomerang s - Dpile x86 binaries to C ctf_import s 3 run basic functions from stripped binaries cross platform GDB s - The GNU project debugger GEF s - GDB plugin Hopper - Reverse engineering tool (disassembler) for OSX and Linux IDA Pro s - Most used Reversing software Jadx s - Dpile Android files Java Dpilers - An online dpiler for Java and Android APKs Krakatau s - Java dpiler and disassembler PEDA s - GDB plugin (only python2.7) Plasma s - An interactive disassembler for x86 which can generate ed pseudo-code with colored syntax. Pwndbg s - A GDB plugin that provides a suite of utilities to hack around GDB easily. radare2 s - A portable reversing framework Upyle s - Dpile Python 2.7 binaries (.pyc) WinDbg - Windows debugger distributed by Microsoft Z3 s - a theorem prover from Microsoft Research JavaScript Deobfustcators italic Detox - A Javascript malware analysis tool Revelo - Analyze obfuscated Javascript code SWF Analyzers italic RABCDAsm s - Collection of utilities including an ActionScript 3 assembler Swftools - Collection of utilities to work with SWF files Xxxswf s - A Python script for analyzing Flash files. Services Various kind of useful services available around the internet italic CSWSH - Cross-Site WebSocket Hijacking Tester Request Bin - Lets you inspect requests to a particular Steganography Tools used for solving Steganography challenges italic Convert b formats and apply filters Exif - Shows EXIF information in JPEG files Exiftool s - Read and write meta information in files Exiv2 - Image metadata manipulation tool ImageMagick Outguess s - Universal steganographic tool Pngtools - For various analysis related to PNGs apt-get install pngtools code SmartDeblur s - Used to deblur and fix defocused Steghide - Hide data in various kind of s Web Tools used for solving Web challenges italic Commix s - Automated All-in-One OS Command Injection and Exploitation Tool. Hackbar s - Firefox addon for easy web exploitation OWASP ZAP s - Intercepting proxy to replay debug and fuzz HTTP requests and responses Postman s - Add on for chrome for debugging network requests SQLMap s - Automatic SQL injection and database takeover tooli W3af s - Web Application Attack and Audit Framework. XSSer - Automated XSS testor