
Repositório para indexar ferramentas úteis para CTFs.
Repositório para indexar ferramentas interessantes de Capture The Flag e outras coisas.
https://atenea.ccn-cert.cni.es/home
Desafios de Web Hacking: http://webhacking.kr/
Plataforma para aprender criptografia moderna: https://cryptohack.org/
Plataforma de Reversing: https://crackmes.one/
Desafios de Forense: https://ctf.unizar.es/ && https://freetraining.dfirdiva.com/dfir-ctfs-challenges && https://socvel.com/
PicoCTF: https://play.picoctf.org/login
Blue team: https://letsdefend.io/
https://gchq.github.io/CyberChef/
https://www.dcode.fr/tools-list#cryptography
Identificador e analisador de cifras: https://www.boxentriq.com/code-breaking/cipher-identifier
Identificador de formato de dados: https://geocaching.dennistreysa.de/multisolver/
Solucionador automático de criptogramas (substituição) https://quipqiup.com/
Análise de frequências: https://crypto.interactive-maths.com/frequency-analysis-breaking-the-code.html
Força bruta de Vigenere: https://guballa.de/vigenere-solver
RsaCtfTool: https://github.com/Ganapati/RsaCtfTool
Desencriptar mensagens de emoji https://cryptoji.com/ & https://cryptii.com/pipes/morse-code-with-emojis
Padding-oracle-attacker: https://github.com/KishanBagaria/padding-oracle-attacker
Dicionário de bandeiras de sinais marítimos: https://en.wikipedia.org/wiki/International_maritime_signal_flags
Enigma: https://cryptii.com/
Fatorização: http://factordb.com/
Compilação de criptoanálise: https://github.com/mindcrypt/Cryptanalysis
http://rumkin.com/tools/cipher/
Conversor em tempo real: https://kt.gy/tools.html#conv/
Script simples para calcular o endereço onion a partir de um descritor de serviço oculto Tor ou chave pública: https://gist.github.com/DonnchaC/d6428881f451097f329e (é necessário modificar a linha 14 para que funcione corretamente "onion_address = hashlib.sha1(key.exportKey('DER')[22:]).digest()[:10]").
Conversão de voz em texto: https://speech-to-text-demo.ng.bluemix.net/
Letras de músicas: https://codewithrockstar.com/online
Gerador online de hash md5 de uma string: http://www.md5.cz/
Base de dados de hashes: https://crackstation.net/
Dehashed: https://www.dehashed.com/
Quebrar hashes: http://rainbowtables.it64.com/
Base de dados de hashes: https://www.onlinehashcrack.com/
Base de dados de hashes: https://md5decrypt.net/en/
Base de dados de hashes: https://hashkiller.io/
Base de dados de hashes: https://hashes.com/en/decrypt/hash
Descodificador da linguagem de programação esotérica Ook!: https://www.dcode.fr/ook-language
Descodificador da linguagem de programação esotérica Brainfuck: https://www.dcode.fr/brainfuck-language
Descodificador da linguagem de programação esotérica Malboge: https://www.malbolge.doleczek.pl/
Linguagem de programação esotérica COW: https://frank-buss.de/cow.html
Exiftool
Zsteg
Exiv2
Identify -verbose file
Assinaturas de Magic Numbers: https://asecuritysite.com/forensics/magic && https://www.garykessler.net/library/file_sigs.html → Hexeditor
Binwalk -e image
Foremost -i image -o outdir
Steghide: http://steghide.sourceforge.net/documentation/manpage_es.php (ex.: steghide extract -sf file , steghide info file)
Stegseek: https://github.com/RickdeJager/stegseek (Melhor que o Stegcracker)
StegCracker: https://github.com/Paradoxis/StegCracker
Ferramenta de análise de esteganografia mais aprofundada: https://aperisolve.fr/
Analisador de espectro: https://academo.org/demos/spectrum-analyzer/
Stegsolve: https://github.com/zardus/ctf-tools/blob/master/stegsolve/install (execução: java -jar steg_solve.jar)
Transformada de Fourier: http://bigwww.epfl.ch/demo/ip/demos/FFT/ && https://github.com/0xcomposure/FFTStegPic
Ferramenta de esteganografia de tinta invisível digital: https://sourceforge.net/projects/diit/
Descodificação de ficheiros de cassetes turbo Atari de 8 bits: https://github.com/baktragh/turbodecoder
https://incoherency.co.uk/image-steganography/#unhide
https://stegonline.georgeom.net/upload
https://stylesuxx.github.io/steganography/
https://skynettools.com/free-online-steganography-tools/
Descodificador de áudio adaptativo de código Morse: https://morsecode.world/international/decoder/audio-decoder-adaptive.html
Audacity (sudo apt-get install audacity) Ex.: https://www.hackiit.cf/write-up-hackiit-ctf-biological-hazard-ii/
AudioStego: https://github.com/danielcardeenas/AudioStego
Analisar ficheiros e URLs suspeitos para detetar stegomalware: https://stegoinspector.com/#/
Tradutor de Aurebesh: https://funtranslations.com/aurebesh
Esteganografia Bitcoin: https://incoherency.co.uk/stegoseed/
Esteganografia Mojibake: https://incoherency.co.uk/mojibake/
Esteganografia de Xadrez : https://incoherency.co.uk/chess-steg/
Resolvedor / Visualizador de Magic Eye: https://magiceye.ecksdee.co.uk/
Descodificador de QR: https://online-barcode-reader.inliteresearch.com/ && https://zxing.org/w/decode.jspx
Stegosuite: http://manpages.ubuntu.com/manpages/bionic/man1/stegosuite.1.html
StegSecret: http://stegsecret.sourceforge.net/
Openstego: https://www.openstego.com/
Stegpic: https://domnit.org/stepic/doc/
Bytehist: https://www.cert.at/en/downloads/software/software-bytehist
https://www.bertnase.de/npiet/npiet-execute.php
Reparar imagens: https://online.officerecovery.com/es/pixrecovery/
Ferramenta para recuperar palavras-passe de capturas de ecrã pixelizadas: https://github.com/beurtschipper/Depix
Análise forense de imagens: https://github.com/GuidoBartoli/sherloq
Esteganografia Unicode com caracteres de largura zero: https://330k.github.io/misc_tools/unicode_steganography.html
Stegsnow (caracteres de largura zero): https://pentesttools.net/hide-secret-messages-in-text-using-stegsnow-zero-width-characters/
Linguagem SPAM ou PGP: https://www.spammimic.com/decode.shtml