CTF-tool - A curated list of Capture The Flag (CTF) framework

项目说明

CTF-tool

A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.

Awesome CTF ![Build Status]() ![Awesome]()

A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.

Contributing

Please take a quick look at the contribution guidelines first.

#### _If you know a tool that isn't present here, feel free to open a pull request._

Why?

It takes time to build up collection of tools used in ctf and remember them all. This repo helps to keep all these scattered tools at one place.

Contents

Awesome CTF

- Create
- Forensics
- Web
- Solve
- Attacks
- Bruteforcers
- Cryptography
- Exploits
- Forensics
- Re
- Services
- Steganography
- Web

Resources

- Starter Packs
- Tutorials
- Wargames
- Websites
- Wikis
- Writeups Collections

Create

*Tools used for creating CTF challenges*

Forensics

*Tools used for creating Forensics challenges*

Registry Dumper - Dump your registry

Web

*Tools used for creating Web challenges*

*Ja Obfustcators*

Metasploit Ja Obfustcator

Uglify

Solve

*Tools used for solving CTF challenges*

Attacks

*Tools used for performing kinds of attacks*

Bettercap - Framework to perform MITM (Man in the Middle) attacks.

Layer 2 attacks - Attack protocols on layer 2

Crypto

*Tools used for solving Crypto challenges*

PkCrack - A tool for Breaking PkZip-encryption

RSATool - Generate private key with knowledge of p and q

XORTool - A tool to analyze multi-byte xor cipher

Bruteforcers

*Tools used for kind of bruteforcing (passwords etc.)*

John The Jumbo - Community enhanced of John the Ripper

John The Ripper - Password Cracker

Ophcrack - Windows password cracker based on rainbow tables.

Exploits

*Tools used for solving Exploits challenges*

binjitsu - CTF framework and exploit de library

Metasploit - Penetration testing software

pwntools - CTF Framework for writing exploits

qira - QEMU Interacti Analyser

ROP Gadget - Framework for ROP exploitation

Forensics

*Tools used for solving Forensics challenges*

Aircrack-Ng - Crack 802.11 WEP and WPA-PSK keys

- apt-get install aircrack-ng

Audacity - Analyze sound files (mp3, m4a, whatever)

- apt-get install audacity

bkhive and samdump2 - Dump SYSTEM and SAM files

- apt-get install samdump2 bkhive

CFF Explorer - PE Editor

creddump - Dump windows credentials

D - Rips web accessible (distributed) control systems

Exif Tool - Read, write and edit file metadata

extundelete - Used for reco lost data from mountable images

Foremost - Extract particular kind of files using headers

- apt-get install foremost

fsck.ext4 - Used to fix corrupt filesystems

Malzilla - Malware hunting tool

NetworkMiner - Network Forensic Analysis Tool

PDF Streams Inflater - Find and extract zlib files compressed in PDF files

ResourcesExtract - Extract filetypes from exes

Shellbags - In NT\_USER.dat files

UsbForensics - Contains many tools for usb forensics

- To in memory dumps

Wireshark - Analyze the network dumps

- apt-get install wireshark

*Registry *

Registry - Used to view windows registries

Windows Registry - More registry

Re

*Tools used for solving Re challenges*

Androguard - Reverse engineer Android applications

Apk2Gold - Yet another Android decompiler

ApkTool - Android Decompiler

BinUtils - Collection of binary tools

BinWalk - Analyze, reverse engineer, and extract firmware images.

Boomerang - Decompile x86 binaries to C

GDB - The GNU project debugger

IDA Pro - Most used Re software

Jadx - Decompile Android files

Krakatau - Ja and disassembler

radare2 - A portable re framework

Uncompyle - Decompile Python 2.7 binaries (.pyc)

WinDbg - Windows debugger distributed by Microsoft

z3 - a theorem prover from Microsoft Research

*Ja Deobfustcators*

Detox - A Ja malware analysis tool

Revelo - Analyze obfuscated Ja code

*SWF Analyzers*

RABCDAsm - Collection of utilities including an ActionScript 3 assembler/disassembler.

swftools - Collection of utilities to work with SWF files

xxxswf - A Python script for analyzing Flash files.

Services

* kind of useful services a around the internet*

CSWSH - Cross-Site WebSocket Hijacking Tester

Request Bin - Lets you inspect http requests to a particular url

Stegano

*Tools used for solving Steganography challenges*

pngtools - For analysis related to PNGs

- apt-get install pngtools

SmartDeblur - Used to deblur and fix defocused images

Steganabara - Tool for stegano analysis written in Java

Steghide - Hide data in kind of images

Stegsolve - Apply steganography techniques to images

Web

*Tools used for solving Web challenges*

SQLMap - Automatic SQL injection and database takeo

w3af - Web Application Attack and Audit Framework.

XSSer - Automated XSS testor

Resources

*Where to disco CTF*

Starter Packs

*Collections of installer scripts, useful tools*

CTF Tools - Collection of setup scripts to install security research tools.

Tutorials

*Tutorials to learn how to play CTFs*

CTF Field Guide - Field Guide by Trails of Bits

CTF Resources - Start Guide maintained by community

How to Get Started in CTF - Short guideline for CTF beginners by Endgame

MIPT CTF - A small course for beginners in CTFs (in Russian)

Wargames

*Always online CTFs*

Backdoor - Security Platform by SDSLabs.

Ctfs.me - CTF All the time

Exploit Exercises - of VMs to learn of computer security issues.

Hack This Site - Training ground for hackers.

Over The Wire - Wargame maintained by O Community

Ringzer0Team - Ringzer0 Team Online CTF

SmashTheStack - A of wargames maintained by the SmashTheStack Community.

- for practical in digital security, computer application & network administration.

WeChall - Always online challenge site.

Websites

* general websites about and on ctf*

CTF Time - General information on CTF occuring around the worlds

Reddit Security CTF - Reddit CTF category

Wikis

* Wikis a for learning about CTFs*

Bamboofox - Chinese resources to learn CTF

ISIS Lab - CTF Wiki by Isis lab

Writeups Collections

*Collections of CTF write-ups*

Captf - Dumped CTF challenges and materials by psifertex

CTF write-ups (community) - CTF challenges + write-ups archi by the community

pwntools writeups - A collection of CTF write-ups all using pwntools

Shell Storm - CTF challenge archi by Jonathan Salwan

Smoke Leet E - CTF write-ups repo maintained by SmokeLeetE team.

项目信息

开发语言：未知

Star 数：309

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。