ctf.md

Capture the Flag Resources

CTF-related resources.

Cryptography

• Rapid Tables
• dcode.fr
• Factordb - Database of large factored numbers
• How RSA works - There's always an RSA problem...
• HashID - Identify hash types
• John the Ripper - JtR w/ Jumbo patches
• Large hex/decimal conversion @ ss64.com
• OpenSSL - Probably already installed on your system. Create certificates, hashes, connect to SSL wrapped services, ...
• yafu - Helps factor large numbers
• featherduster - Crypto tools
• 1xor - Helps solve 1 byte XOR puzzles
• Skull Security Wordlists

Steganography

• strings
• exiftool
• outguess
• StegSolve
• ImageMagick
• TinEye - Reverse image search.
• GIMP
• Sonic Visualizer
• Stereograms (Magic eye puzzles where you look at pictures cross eyed to see a boat or something equally stupid)
  • Magic Eye Viewer
  • GIMP

Forensics

• file
• binwalk
• foremost
• strings
• Wireshark
• Volatility
• Emacs hexl-mode or vi with xxd as hex editors

Reverse Engineering/Binary Exploitation

Most of the tools for these two categories overlap.

• GDB
• radare2
• Binary Ninja
• IDA
• pwntools
• pattern
• objdump
• strace
• ltrace
• Uncompyle2
• Uncompyle6

Recon

• DNS tools: dig, host, etc.
• Whois
• The Wayback Machine
• TinEye - Reverse image search.
• wget/curl one liners
• Having social media accounts is helpful:
  • Facebook
  • Linkedin
  • Twitter
  • ...
• nmap
• Shodan
• BugMeNot

Web

• Browser developer consoles
  • Chrome
  • Firefox
• ZAP
• Burp Suite
  • Smart Buster Plugin
• Nikto
• Dirbuster (discontinued, but included with Kali and ZAP)
• JWT Decoder
• sqlmap

Misc

• Have a machine capable of running VMs with VirtualBox and VMWare Workstation/Player installed before the contest starts.
• Ability to read Office documents (LibreOffice/MS Office/cloud readers/...)
• QR code reader
• Barcode reader
• Online Character Recognition - Converts pictures of text to text you can use on a computer.