Awesome CTF resources

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

Any contribution is welcome, send me a PR! ❤️

-The software and resources collected do not belong to me and have been compiled for educational purposes only-

Contents

• Create

  • Platforms
  • Forensics
  • Steganography
  • Web

• Solve

  • Cryptography
  • Exploiting / Pwn
  • Forensics
  • Misc
  • Reversing
  • Steganography
  • Web

• Resources

  • Online Platforms
  • Collaborative Tools
  • Writeups Repositories
  • Courses

• Bibliography

0x00. Create

Tools used for creating CTF challenges

Platforms

Frameworks that can be used to host a CTF

• CTFd - Platform to host jeopardy style CTFs.
• FBCTF - Facebook CTF platform to host Jeopardy and "King of the Hill" CTF competitions.
• HackTheArch - Scoring server for CTF competitions.
• kCTF - Kubernetes-based infrastructure for CTF competitions.
• LibreCTF - CTF platform from EasyCTF.
• Mellivora - CTF engine written in PHP.
• NightShade - Simple CTF framework.
• picoCTF - Infrastructure used to run picoCTF.
• rCTF - CTF platform created by the redpwn CTF team. Now maintained and developed by OtterSec team.
• RootTheBox - CTF scoring engine for wargames.
• ImaginaryCTF - Platform to host CTFs.

Forensics

Tools used to create Forensics challenges

• Belkasoft RAM Capturer - Volatile Memory Acquisition Tool.
• Dnscat2 - Hosts communication through DNS.
• Magnet AXIOM 2.0 - Artifact-centric DFIR tool.
• Registry Dumper - Tool to dump Windows Registry.

Steganography

Tools used to create Stego challenges

Check solve section for steganography.

Web

Tools used to create Web challenges

• Metasploit JavaScript Obfuscator - How to obfuscate JavaScript in Metasploit.

0x01. Solve

Cryptography

Tools used for solving Crypto challenges

• Bacon Cipher - Bacon cipher encoder and decoder.
• Base65536 - Unicode's answer to Base64.
• Braille Translator - Translate from braille to text.
• Ciphey - Tool to automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes.
• Crib Drag - One-Time Pad (OTP) cracking tool.
• CyberChef - A web app for encryption, encoding, compression and data analysis.
• Cryptii - Modular conversion, encoding and encryption online.
• dCode.fr - Solvers for Crypto, Maths and Encodings online.
• Decodify - Detect and decode encoded strings, recursively.
• Enigma Machine - Universal Enigma Machine Simulator.
• FeatherDuster - An automated, modular cryptanalysis tool.
• Morse Code Translator - Morse code translator and decoder.
• Galois - A fast galois field arithmetic library/toolkit.
• HashExtender - Tool for performing hash length extension attacks.
• Hash-identifier - Simple hash algorithm identifier.
• padding-oracle-attacker - CLI tool and library to execute padding oracle attacks easily.
• PadBuster - Automated script for performing Padding Oracle attacks.
• PEMCrack - Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks.
• PKCrack - PkZip encryption cracker.
• Polybius Square Cipher - Table that allows someone to translate letters into numbers.
• Quipqiup - Automated cryptogram solver.
• RsaCtfTool - RSA multi attacks tool.
• RSATool - Tool to to calculate RSA and RSA-CRT parameter.
• Rumkin Cipher Tools - Collection of ciphhers/encoders tools.
• Substitution Cipher - Substitution cipher solver.
• Text Machine - Free in-browser classical-cipher encoders/decoders (Bazeries, Chaocipher, Straddling Checkerboard, and more).
• Vigenere Solver - Online tool that breaks Vigenère ciphers without knowing the key.
• XOR Cracker - Online XOR decryption tool able to guess the key length and the cipher key to decrypt any file.
• XORTool - A tool to analyze multi-byte xor cipher.
• yagu - Automated integer factorization.
• Crackstation - Hash cracker (database).
• Online Encyclopedia of Integer Sequences - OEIS: The On-Line Encyclopedia of Integer Sequences

Exploiting / Pwn

Tools used for solving Pwn challenges