CTF Multitool

A collection of Capture the Flag tools and repositories.

---

Table of contents

1. Tool repositories
2. General
3. Cryptography
4. De-Obfuscation
5. Reverse Engineering
6. Forensics
7. OSINT
8. Steganography
9. PWN
10. Learning

---

Tool Repositories

---

This includes other CTF tool repositories that might contain more tools than what you might find here. Check them out!

• gregalletti CTF Tools Repository
• John Hammond's CTF Tools Repository
• Osint Tool Collection

General

---

A list of general tools that can be used to assist with CTF challenges

• Hex Editor - Online hex editor tool that can help with hex-related challenges
• Multi-converter - Converts all kinds of basic crypto and text methods on the fly Collaboration tools
• Codimd - An open source web application allowing for collaborative markdown editing.
• PwnHub - Open source collaboration platform allowing the collaboration of a single team. Ironically made with shell files.

Cryptography:

---

• Cyberchef - Tool to perform anything you ever wish
• d.code - The godlike cryptography tool
• Boxentriq Cipher Identifier - Cryptography tool great at identifying what a cipher is
• Xor Calculator - A great calculator for XOR
• RSA ctf tool - an RSA attack tool to retrieve a private key from a wek public key

De-obfuscation

---

• Prettier Playground - Messy looking long code? Use this to help!
• Javascript Beutifier - A similar tool to pretty longer code
• Javascript UnPacker - Packed Java script? Utilize this to help unpack it. Example of packed java script:

eval(function(p,a,c,k,e,r){e=String;if(!''.replace(/^/,String)){while(c--)r[c]=k[c]||c;k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('(0(){4 1="5 6 7 8";0 2(3){9(3)}2(1)})();',10,10,'function|b|something|a|var|some|sample|packed|code|alert'.split('|'),0,{}))

Reverse Engineering

---

• Binary Ninja - My tool of choice when it comes to reverse engineering. An easy to understand (and has a free cloud system!) you can use to look at binaries
• Detect it Easy - Tool to detect file types and other information about a file

Forensics

---

• evtxview - GUI for microsoft eventx files, python in nature so can run anywhere
• Zip File Cracker
• eric zimmerman's Tools - Lots of tools related to forensic examination of files in windows

Online Code Runner

• JavaScript - Runs javascript
• online-python - Runs

OSINT

---

Gathering open source information

DNS / Web

• WhatsMyName Web - Great tool to search usernames accross the internet
• Internet Archive - A look back in time on websites
• DNS Dumpster - Dumps all of the DNS of a website
• URLScan.io - An amazing tool to scan websites for additional information.
• Bellingcat OpenStreetMap search - An amazing tool to use for geolocation tasks

Corporate Information

• Open Corporates - Gather open corporate information
• Epieos - A big osint website.
• Who Is Domain Search - Great for gathering whois information of websites
• The Harvester - Tool designed to gather emails, ips, subdomains, and urls from public resources.

Other

• PGP Keyserver - If any challenges wants you to look for specific PGP keys.
• Search By Image Extension - Assists in searching images accross many search engines.

Resources

• osint_stuff_tool_collection
• Intel techniques
• Osint Framework

Steganography

---

• Aperi'Solve - One of the best solvers for stegonography images
• StegOnline - A really good CTF Stegonography tool, mostly helps with colors and file extraction
• x-ray unredact tool

PWN

Learning

Recomended Videos:

• Competing in the ALLES. CTF - Team Recording in Real Time - A great video about the Alles! ctf team playing in a Google CTF Finals. Talking all aobut methodologies and how they go through competitions
• Real world CTF Finals 2018 - A great video from LiveOverflow about an in person capture the flag competition that was held in china.
• Advanced tips and tricks for capture the flag an AMAZING talk from John Hammond about capture the flags.

Youtube Channels:

• Live Overflow - A great world class CTF player who has amazing videos on different topics related to CTF's and cybersecurity.
• John Hammond - A great channel to help begginers learn advanced security.
• Matt Brown - Red Team related channel, talks a lot about red-tema related content

Reading content

• Hack Tricks Book - A book all about red team and other cybersecurity related topics. A great read for those interested in capture the flags.
• Humble Bundle - Occasionally has really good deals related to cybersecurity

Practice Challenges

• Under the Wire Wargames- Games to exercise additional learning in capture the flags.
• Pico CTF - Small capture the flag challenges to exercies the brain
• Pwnable