awesome-ctf - A curated list of CTF frameworks, libraries, resou

项目说明

Awesome CTF ![Build Status]() ![Awesome]()

A curated list of Capture The Flag (CTF) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find e related to CTFs at one place.

Contributing

Please take a quick look at the contribution guidelines first.

#### _If you know a tool that isn't present here, feel free to open a pull request._

Why?

It takes time to build up collection of tools used in CTF and remember them all. This repo helps to keep all these scattered tools at one place.

Contents

Awesome CTF

- Create
- Forensics
- Platforms
- Steganography
- Web
- Solve
- Attacks
- Bruteforcers
- Cryptography
- Exploits
- Forensics
- Networking
- Re
- Services
- Steganography
- Web

Resources

- Operating Systems
- Starter Packs
- Tutorials
- Wargames
- Websites
- Wikis
- Writeups Collections

Create

*Tools used for creating CTF challenges*

Kali Linux CTF Blueprints - Online book on building, testing, and customizing your own Capture the Flag challenges.

Forensics

*Tools used for creating Forensics challenges*

Dnscat2 - Hosts communication through DNS.

Kroll Artifact Parser and Extractor (KAPE) - Triage program.

Magnet AXIOM - Artifact-centric DFIR tool.

Registry Dumper - Dump your registry.

Platforms

*Projects that can be used to host a CTF*

CTFd - Platform to host jeopardy style CTFs from ISISLab, NYU Tandon.

echoCTF.RED - Develop, deploy and maintain your own CTF infrastructure.

FBCTF - Platform to host Capture the Flag competitions from Facebook.

Haaukins- A Highly Accessible and Automated Platform for Security Education.

HackTheArch - CTF scoring platform.

Mellivora - A CTF engine written in PHP.

MotherFucking-CTF - Badass lightweight plaform to host CTFs. No JS in.

NightShade - A simple security CTF framework.

OpenCTF - CTF in a box. Minimal setup required.

PicoCTF - The platform used to run picoCTF. A great framework to host any CTF.

PyChallFactory - Small framework to create/manage/package jeopardy CTF challenges.

RootTheBox - A Game of Hackers (CTF Scoreboard & Game Manager).

Scorebot - Platform for CTFs by Legitbs (Defcon).

SecGen - Security Scenario Generator. Creates randomly machines.

Steganography

*Tools used to create stego challenges*

Check sol for steganography.

Web

*Tools used for creating Web challenges*

*Ja Obfustcators*

Metasploit Ja Obfuscator

Uglify

Solve

*Tools used for solving CTF challenges*

Attacks

*Tools used for performing kinds of attacks*

Bettercap - Framework to perform MITM (Man in the Middle) attacks.

Yersinia - Attack protocols on layer 2.

Crypto

*Tools used for solving Crypto challenges*

CyberChef - Web app for analysing and decoding data.

FeatherDuster - An automated, modular cryptanalysis tool.

Hash Extender - A utility tool for performing hash length extension attacks.

padding-oracle-attacker - A CLI tool to execute padding oracle attacks.

PkCrack - A tool for Breaking PkZip-encryption.

QuipQuip - An online tool for breaking substitution ciphers or ciphers (without key).

RSACTFTool - A tool for reco RSA private key with attack.

RSATool - Generate private key with knowledge of p and q.

XORTool - A tool to analyze multi-byte xor cipher.

Bruteforcers

*Tools used for kind of bruteforcing (passwords etc.)*

Hashcat - Password Cracker

Hydra - A parallelized login cracker which supports numerous protocols to attack

John The Jumbo - Community enhanced of John the Ripper.

John The Ripper - Password Cracker.

Nozzlr - Nozzlr is a bruteforce framework, trully modular and script-friendly.

Ophcrack - Windows password cracker based on rainbow tables.

Patator - Patator is a multi-purpose brute-forcer, with a modular design.

Turbo Intruder - Burp Suite extension for sending large numbers of HTTP requests

Exploits

*Tools used for solving Exploits challenges*

DLLInjector - Inject dlls in processes.

libformatstr - Simplify format string exploitation.

Metasploit - Penetration testing software.

- Cheatsheet

one_gadget - A tool to find the one gadget execve('/bin/sh', NULL, NULL) call.

- gem install one_gadget

Pwntools - CTF Framework for writing exploits.

Qira - QEMU Interacti Analyser.

ROP Gadget - Framework for ROP exploitation.

V0lt - Security CTF Toolkit.

Forensics

*Tools used for solving Forensics challenges*

Aircrack-Ng - Crack 802.11 WEP and WPA-PSK keys.

- apt-get install aircrack-ng

Audacity - Analyze sound files (mp3, m4a, whatever).

- apt-get install audacity

Bkhive and Samdump2 - Dump SYSTEM and SAM files.

- apt-get install samdump2 bkhive

CFF Explorer - PE Editor.

Creddump - Dump windows credentials.

D - Rips web accessible (distributed) control systems.

Exif Tool - Read, write and edit file metadata.

Extundelete - Used for reco lost data from mountable images.

Fibratus - Tool for exploration and tracing of the Windows kernel.

Foremost - Extract particular kind of files using headers.

- apt-get install foremost

Fsck.ext4 - Used to fix corrupt filesystems.

Malzilla - Malware hunting tool.

NetworkMiner - Network Forensic Analysis Tool.

PDF Streams Inflater - Find and extract zlib files compressed in PDF files.

Pngcheck - the integrity of PNG and dump all of the chunk-le in human-readable form.

- apt-get install pngcheck

ResourcesExtract - Extract filetypes from exes.

Shellbags - In NT\_USER.dat files.

Snow - A Whitespace Steganography Tool.

USBRip - Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux.

- To in memory dumps.

Wireshark - Used to analyze pcap or pcapng files

*Registry *

OfflineRegistryView - Simple tool for Windows that allows you to read offline Registry files from external drive and view the desired Registry key in .reg file format.

Registry ® - Used to view Windows registries.

Networking

*Tools used for solving Networking challenges*

Masscan - Mass IP port scanner, TCP port scanner.

Monit - A linux tool to check a host on the network (and other non-network acti).

Nipe - Nipe is a script to make Tor Network your default gateway.

Nmap - An open source utility for network discovery and security auditing.

Wireshark - Analyze the network dumps.

- apt-get install wireshark

Zeek - An open-source network security monitor.

Zmap - An open-source network scanner.

Re

*Tools used for solving Re challenges*

Androguard - Reverse engineer Android applications.

Angr - platform-agnostic binary analysis framework.

Apk2Gold - Yet another Android decompiler.

ApkTool - Android Decompiler.

Barf - Binary Analysis and Reverse engineering Framework.

Binary Ninja - Binary analysis framework.

BinUtils - Collection of binary tools.

BinWalk - Analyze, reverse engineer, and extract firmware images.

Boomerang - Decompile x86/SPARC/PowerPC/ST-20 binaries to C.

ctf_import – run basic functions from stripped binaries cross platform.

cwe_checker - cwe_checker finds patterns in binary executables.

demo - A work-in-progress deobfuscator for mo binaries.

Frida - Dynamic Code Injection.

GDB - The GNU project debugger.

GEF - GDB plugin.

Ghidra - Open Source suite of reverse engineering tools. Similar to IDA Pro.

Hopper - Reverse engineering tool (disassembler) for OSX and Linux.

IDA Pro - Most used Re software.

Jadx - Decompile Android files.

Ja - An online decompiler for Java and Android APKs.

Krakatau - Ja and disassembler.

Objection - Runtime Mobile Exploration.

PEDA - GDB plugin (only python2.7).

Pin - A dynamic binary instrumentaion tool by Intel.

PINCE - GDB front-end/reverse engineering tool, focused on game-hacking and automation.

PinCTF - A tool which uses intel pin for Side Channel Analysis.

Plasma - An interacti for x86/ARM/MIPS which can generate indented pseudo-code with colored syntax.

Pwndbg - A GDB plugin that provides a suite of utilities to hack around GDB easily.

radare2 - A portable re framework.

Triton - Dynamic Binary Analysis (DBA) framework.

Uncompyle - Decompile Python 2.7 binaries (.pyc).

WinDbg - Windows debugger distributed by Microsoft.

Xocopy - Program that can copy executables with execute, but no read permission.

Z3 - A theorem prover from Microsoft Research.

*Ja Deobfuscators*

Detox - A Ja malware analysis tool.

Revelo - Analyze obfuscated Ja code.

*SWF Analyzers*

RABCDAsm - Collection of utilities including an ActionScript 3 assembler/disassembler.

Swftools - Collection of utilities to work with SWF files.

Xxxswf - A Python script for analyzing Flash files.

Services

* kind of useful services a around the internet*

CSWSH - Cross-Site WebSocket Hijacking Tester.

Request Bin - Lets you inspect http requests to a particular url.

Steganography

*Tools used for solving Steganography challenges*

AperiSolve - Aperi'Solve is a platform which performs layer analysis on image (open-source).

Convert - Convert images b/w formats and apply filters.

Exif - Shows EXIF information in JPEG files.

Exiftool - Read and write meta information in files.

Exiv2 - Image metadata manipulation tool.

Image Steganography - Embeds text and files in images with optional encryption. Easy-to-use UI.

Image Steganography Online - This is a client-side Ja tool to steganographically hide images inside the lower "bits" of other images

ImageMagick - Tool for manipulating images.

Outguess - Uni steganographic tool.

Pngtools - For analysis related to PNGs.

- apt-get install pngtools

SmartDeblur - Used to deblur and fix defocused images.

Steganabara - Tool for stegano analysis written in Java.

SteganographyOnline - Online steganography encoder and decoder.

Stegbreak - Launches brute-force dictionary attacks on JPG image.

StegCracker - Steganography brute-force utility to unco data inside files.

stegextract - Detect hidden files and text in images.

Steghide - Hide data in kind of images.

StegOnline - Conduct a wide range of image steganography operations, such as concealing/re files hidden within bits (open-source).

Stegsolve - Apply steganography techniques to images.

Zsteg - PNG/BMP analysis.

Web

*Tools used for solving Web challenges*

BurpSuite - A graphical tool to testing website security.

Commix - Automated All-in-One OS Command Injection and Exploitation Tool.

Hackbar - Firefox addon for easy web exploitation.

OWASP ZAP - Intercepting proxy to replay, debug, and fuzz HTTP requests and responses

Postman - Add on for chrome for debugging network requests.

Raccoon - A high performance offensi tool for reconnaissance and scanning.

SQLMap - Automatic SQL injection and database takeover tool.

W3af - Web Application Attack and Audit Framework.

XSSer - Automated XSS testor.

Resources

*Where to disco CTF*

Operating Systems

*Penetration testing and security lab Operating Systems*

Android Tamer - Based on Debian.

BackBox - Based on Ubuntu.

BlackArch Linux - Based on Arch Linux.

Fedora Security Lab - Based on Fedora.

Kali Linux - Based on Debian.

Parrot Security OS - Based on Debian.

Pentoo - Based on Gentoo.

URIX OS - Based on openSUSE.

Wifislax - Based on Slackware.

*Malware analysts and re*

Flare VM - Based on Windows.

REMnux - Based on Debian.

Starter Packs

*Collections of installer scripts, useful tools*

CTF Tools - Collection of setup scripts to install security research tools.

LazyKali - A 2016 refresh of LazyKali which simplifies install of tools and configuration.

Tutorials

*Tutorials to learn how to play CTFs*

CTF Field Guide - Field Guide by Trails of Bits.

CTF Resources - Start Guide maintained by community.

How to Get Started in CTF - Short guideline for CTF beginners by Endgame

Intro. to CTF Course - A free course that teaches beginners the basics of forensics, crypto, and web-ex.

IppSec - Video tutorials and walkthroughs of popular CTF platforms.

Li - Video tutorials on Exploitation.

MIPT CTF - A small course for beginners in CTFs (in Russian).

Wargames

*Always online CTFs*

Backdoor - Security Platform by SDSLabs.

Crackmes - Reverse Engineering Challenges.

CryptoHack - Fun cryptography challenges.

echoCTF.RED - Online CTF with a of targets to attack.

Exploit Exercises - of VMs to learn of computer security issues.

Exploit.Education - of VMs to learn of computer security issues.

Gracker - Binary challenges having a slow learning curve, and write-ups for each level.

Hack The Box - Weekly CTFs for all types of security enthusiasts.

Hack This Site - Training ground for hackers.

Hacker101 - CTF from HackerOne

Hacking-Lab - Ethical hacking, computer network and security challenge platform.

Hone Your Ninja Skills - Web challenges starting from basic ones.

IO - Wargame for binary challenges.

Microcorruption - Embedded security CTF.

Over The Wire - Wargame maintained by O Community.

PentesterLab - of VM and online challenges (paid).

PicoCTF - All year round ctf game. Questions from the yearly picoCTF competition.

PWN Challenge - Binary Exploitation Wargame.

Pwnable.kr - Pwn Game.

Pwnable.tw - Binary wargame.

Pwnable.xyz - Binary Exploitation Wargame.

Re.kr - Re challenge.

Ringzer0Team - Ringzer0 Team Online CTF.

Root-Me - Hacking and Information Security learning platform.

ROP Wargames - ROP Wargames.

SANS HHC - Challenges with a holiday theme

released annually and maintained by SANS.

SmashTheStack - A of wargames maintained by the SmashTheStack Community.

Viblo CTF - amazing CTF challenges, in many different categories. Has both Practice mode and Contest mode.

- for practical in digital security, computer application & network administration.

W3Challs - A penetration testing training platform, which offers computer challenges, in categories.

WebHacking - Hacking challenges for web.

*Self-hosted CTFs*

Damn Web Application - PHP/MySQL web application that is damn .

Juice Shop CTF - Scripts and tools for hosting a CTF on OWASP Juice Shop easily.

Websites

* general websites about and on CTF*

Awesome CTF Cheatsheet - CTF Cheatsheet.

CTF Time - General information on CTF occuring around the worlds.

Reddit Security CTF - Reddit CTF category.

Wikis

* Wikis a for learning about CTFs*

Bamboofox - Chinese resources to learn CTF.

bi0s Wiki - Wiki from team bi0s.

CTF Cheatsheet - CTF tips and tricks.

ISIS Lab - CTF Wiki by Isis lab.

OpenToAll - CTF tips by OTA CTF team members.

Writeups Collections

*Collections of CTF write-ups*

0e85dc6eaf - Write-ups for CTF challenges by 0e85dc6eaf

Captf - Dumped CTF challenges and materials by psifertex.

CTF write-ups (community) - CTF challenges + write-ups archi by the community.

CTFTime Scrapper - Scraps all writeup from CTF Time and organize which to read first.

HackThisSite - CTF write-ups repo maintained by HackThisSite team.

Mzfr - CTF competition write-ups by mzfr

pwntools writeups - A collection of CTF write-ups all using pwntools.

SababaSec - A collection of CTF write-ups by the SababaSec team

Shell Storm - CTF challenge archi by Jonathan Salwan.

Smoke Leet E - CTF write-ups repo maintained by SmokeLeetE team.

LICENSE

CC0 :)

项目信息

开发语言：JavaScript

Star 数：11888

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A curated list of CTF frameworks, libraries, resources and softwares展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。