CTF_tools - List of tools and commands that may be helpful in

项目说明

CTF Tools

This repository is a place where I want to keep all the useful *resources/websites/tools* to solve CTF challenges. All the tools will be divided by category, in order to better organize them.

It will contain even some "obvious" links, like the ASCII table and so on, because it is a page indended to be kept open during CTFs: you never know what will come in handy!

This repo is for me but also for my CTF team, and why not for whoever will get to this page.

Want to contribute?

1. Fork the repository - Create your own fork on GitHub
2. Create a feature branch - Create a new branch for your feature:

4. Make your changes - Write your contribution
7. Commit and push your changes - Use clear commit messages and push your branch
9. Create a pull request - Submit a PR against this repository

Any question or no time to make your own changes? _Feel free to create an issue on this repository!_

Training 🚩

> A list of useful websites to train our skills and knowledge.

picoCTF

capturetheflag

o

pwnable

General 📋

#### Tools

John Hammond - Katana: huge repo of very useful CTF tools, thank you John, my repo now looks useless

Cyberchef: huge tool to perform every type of calculation of any category

Hex Editor: online hex editor for files

Online Con: ASCII/Hex/Dec/Bin/b64 con tool online

XOR Calculator

Resource Saver: Chrome extension to download all the res of a website

Github Secrets: search for dangling or force-pushed commits in a Github repo

Zip Password Cracker: a realy useful and free online zip password finder

Regex Check: check regular expressions online

#### Resources

ASCII Table

Cryptography 🔒

#### Tools

dCode: crypto heaven

QuipQuip: online substitution cipher solver with frequency analysis, also allows to insert frequency hints

Big Numbers Calculator 1: an online calculator for huge integers

Big Numbers Calculator 2: an online calculator for huge integers, worse UI but maybe better performance

RSA Calculator: online RSA parameters calculator with encryption/decryption, works also with big numbers

Inverse mod N Calculator: compute the modular inverse of a number, even with big numbers

RsaCtfTool: Python tool to perform RSA attacks

FactorDB: find well-known integer factorization

CrackStation: online hash cracker (md5, sha, ...)

Solver: very good online Cipher solver with bruteforce

Substitution Solver: very good online Substitution Cipher solver with bruteforce

Sage Math: online Sage en to perform Crypto calculations

Crunch: Linux tool to create custom dictionaries for attacks (hash, pd, ..)

Online Hash Crack: big website to perform hash/pwd cracking and identification on files

Hash Identifier: Linux tool to perform hash identification

Morse Code Translator

Dual Tone Decoder: find DTMF tones within audio clips

gmpy2: Python library for multiple-precision arithmetic

#### Resources

Weird Ciphers: a list of some strange cryptography algorithms

Symbolic Ciphers: another list of strange cryptography algorithms

Steganography 🎨

#### Tools

Aperi'Solve: one of the best online tools, with static analysis and also running zsteg, steghide, exiftool, binwalk, foremost, ..

StegOnline: big stego tool, upload image and modify/extract data

Stegsolve: JAR file to view hidden text in images

Steg 1: online encoder/decoder of files in images

Steg 2: online encoder/decoder of files in images, maybe more powerful

Images Color picker: get colors from websites/images in Hex/RGB

Stegseek: lightning fast steghide cracker that can be used to extract hidden data from files.

#### Resources

steghide: manual website of the Steghide tool

zsteg: Ruby tool for steganography purposes

Web 🕸️

#### Tools

CSP E: Google CSP e with bypass possibilities

Subdomain Finder: website to find subdomains of URLs, e ones

Google Certificates: search certificates of a website by domain

Tra Archives: samples of archi in formats that attempt to exploit (hypothetical) directory travesal bugs

#### Resources

CSP Cheatsheet: list of CSPs and relati possibilities

JSONP Endpoints: list of well-known JSONP Endpoints

Web Payloads: list of Web Payloads of techniques

Pwn 🐛

Tools

Syscall Reference: x86 / x64 syscalls manual with registers value

Asm/Disasm: online x86 / x64 assembler and disassembler

LibC Check: find all the possible libc with symbol name and entry address

BinaryNinja: online binary file decompiler

DogBolt: online binary file decompiler with different options like Ghidra and BinaryNinja

Resources

Forensics 🕵️‍♂️

Tools

Forensically: online forensic analysis tool to extract cool data from images, ..

Autopsy: file recovery tool with data carving, ..

Foremost: file recovery tool based on their magic bytes, headers, ..

Resources

OSINT 🌐

Mail from LinkedIn: Chrome extension to find email addresses from Linkedin page

Wayback Machine: webpage archive at a certain time

Sherlock: hunt down social media accounts by username

Email lookup: tool to retrie linked to an email address

Re ↩️

Tools

Online Decompiler: online tool to decompile Ja, APKs,...

MobSF: tool to decompile and reverse APK files

JADX: tools for producing Ja code from Android Dex and APK files

NB: strings is useful also on APK files

Resources

项目信息

开发语言：未知

Star 数：396

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕List of tools and commands that may be helpful in CTFs展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。