SCWF - CTF tool for identifying, brute forcing and decodi

项目说明

Sol With Force (SCWF)

CTF tool for identifying, brute forcing and decoding encryption schemes in an automated way.

Click here for the li (use Chrome).

Crypto CTF (sub)challenges can roughly be categorized as follows:
1. Weak implementation/configuration of strong cryptographic schemes (e.g. RSA based challenges)
2. Weak cryptographic cipher usage (e.g. Vigenère)
3. Obfuscation (e.g. Skip, Railfence)
4. Encodings (e.g. Base32, Morse)

While case 1 is arguably the most fun to sol 2 to 4 are still used in CTFs, i.e. CyberLympics. It can take a lot of time figuring out what it exactly is. This is especially true since no a tool does the identification of which cipher/encoding is used.

Sol With Force (SCWF) was created in 2014 as a "scratch your own itch" to automate the identification and decryption of the abo cases 2 to 4 in certain CTF's (*cough* CyberLympics). This allowed brainpower to be used for other, more fun challenges to be solved.

SCWF uses statistical analysis to identify which encoding or encryption is used and grade the output using a dictionary. It will grade each output by identifying English words, links and flags. You input a challenge in the top textarea and it will make a graph in an attempt to solve it.

![alt text][example]
A graph that is created within a few seconds from this example input: 2016 Internetwache CTF - crypto pirate 50

Currently, the following ciphers can be identified and sol or to a certain extent:
![alt text][currentcap]

Getting Started

Click here for the li.

For offline use: clone all and open index.html.

Optional: Host /Ser/ folder on your own server and point "" to your own server.

Support: The code is only tested for Chrome on a 1080p normal-PPI screen. However, Firefox on Linux also seems to work reasonably well.

Running the tests

Manual testing can be done by pasting your obfuscated string or one from DECRYPTME.txt in the top textarea.

Running automated tests is as easy as hitting the top-right "Test-Mode" button. Every time a new cipher is added, add one extra test case in js/TestCases.js .

Acknowledgments

For testing, brainstorming and bug reports :smile:
* Hack.ERS
* dotelite

All other projects I borrowed code from!

License

This project is licensed under the GNU General Public License v3.0.

[example]: "Example of running SCWF"
[currentcap]: "Currently supported algorithms"

项目信息

开发语言：JavaScript

Star 数：80

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕CTF tool for identifying, brute forcing and decoding encryption schemes in an automated way展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。