awesome-ctf

Online book on building, testing, and customizing your own Capture the Flag challenges

Dnscat2

Hosts communication through DNS

Triage program

Artifact-centric DFIR tool

Dump your registry

CTFd

Platform to host jeopardy style CTFs from ISISLab, NYU Tandon

echoCTF.RED

Develop, deploy and maintain your own CTF infrastructure

FBCTF

Platform to host Capture the Flag competitions from Facebook

Haaukins

A Highly Accessible and Automated Virtualization Platform for Security Education

HackTheArch

CTF scoring platform

Mellivora

A CTF engine written in PHP

MotherFucking-CTF

Badass lightweight plaform to host CTFs. No JS involved

NightShade

A simple security CTF framework

OpenCTF

CTF in a box. Minimal setup required

PicoCTF

The platform used to run picoCTF. A great framework to host any CTF

PyChallFactory

Small framework to create/manage/package jeopardy CTF challenges

RootTheBox

A Game of Hackers (CTF Scoreboard & Game Manager)

Scorebot

Platform for CTFs by Legitbs (Defcon)

SecGen

Security Scenario Generator. Creates randomly vulnerable virtual machines

Bettercap

Framework to perform MITM (Man in the Middle) attacks

Yersinia

Attack various protocols on layer 2

Web app for analysing and decoding data

FeatherDuster

An automated, modular cryptanalysis tool

Hash Extender

A utility tool for performing hash length extension attacks

padding-oracle-attacker

A CLI tool to execute padding oracle attacks

A tool for Breaking PkZip-encryption

An online tool for breaking substitution ciphers or vigenere ciphers (without key)

RSACTFTool

A tool for recovering RSA private key with various attack

RSATool

Generate private key with knowledge of p and q

XORTool

A tool to analyze multi-byte xor cipher

Password Cracker

A parallelized login cracker which supports numerous protocols to attack

John The Jumbo

Community enhanced version of John the Ripper

Password Cracker

Nozzlr

Nozzlr is a bruteforce framework, trully modular and script-friendly

Windows password cracker based on rainbow tables

Patator

Patator is a multi-purpose brute-forcer, with a modular design

Burp Suite extension for sending large numbers of HTTP requests

DLLInjector

Inject dlls in processes

libformatstr

Simplify format string exploitation

Penetration testing software

one_gadget

A tool to find the one gadget call

Pwntools

CTF Framework for writing exploits

Qira

QEMU Interactive Runtime Analyser

ROP Gadget

Framework for ROP exploitation

V0lt

Security CTF Toolkit

Crack 802.11 WEP and WPA-PSK keys

Analyze sound files (mp3, m4a, whatever)

Dump SYSTEM and SAM files

PE Editor

Creddump

Dump windows credentials

DVCS Ripper

Rips web accessible (distributed) version control systems

Read, write and edit file metadata

Used for recovering lost data from mountable images

Fibratus

Tool for exploration and tracing of the Windows kernel

Extract particular kind of files using headers

Used to fix corrupt filesystems

Malware hunting tool

Network Forensic Analysis Tool

Find and extract zlib files compressed in PDF files

Verifies the integrity of PNG and dump all of the chunk-level information in human-readable form

Extract various filetypes from exes

Shellbags

Investigate NT_USER.dat files

A Whitespace Steganography Tool

USBRip

Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux

Volatility

To investigate memory dumps

Used to analyze pcap or pcapng files

Simple tool for Windows that allows you to read offline Registry files from external drive and view the desired Registry key in .reg file format

Used to view Windows registries

Masscan

Mass IP port scanner, TCP port scanner

A linux tool to check a host on the network (and other non-network activities)

Nipe

Nipe is a script to make Tor Network your default gateway

An open source utility for network discovery and security auditing

Analyze the network dumps

An open-source network security monitor

An open-source network scanner

Androguard

Reverse engineer Android applications

Angr

platform-agnostic binary analysis framework

Apk2Gold

Yet another Android decompiler

Android Decompiler

Barf

Binary Analysis and Reverse engineering Framework

Binary analysis framework

Collection of binary tools

BinWalk

Analyze, reverse engineer, and extract firmware images

Boomerang

Decompile x86/SPARC/PowerPC/ST-20 binaries to C

ctf_import

– run basic functions from stripped binaries cross platform

cwe_checker

cwe_checker finds vulnerable patterns in binary executables

demovfuscator

A work-in-progress deobfuscator for movfuscated binaries

Dynamic Code Injection

The GNU project debugger

GEF

GDB plugin

Open Source suite of reverse engineering tools. Similar to IDA Pro

Reverse engineering tool (disassembler) for OSX and Linux

Most used Reversing software

Jadx

Decompile Android files

An online decompiler for Java and Android APKs

Krakatau

Java decompiler and disassembler

Objection

Runtime Mobile Exploration

PEDA

GDB plugin (only python2.7)

A dynamic binary instrumentaion tool by Intel

PINCE

GDB front-end/reverse engineering tool, focused on game-hacking and automation

PinCTF

A tool which uses intel pin for Side Channel Analysis

Plasma

An interactive disassembler for x86/ARM/MIPS which can generate indented pseudo-code with colored syntax

Pwndbg

A GDB plugin that provides a suite of utilities to hack around GDB easily

radare2

A portable reversing framework

Triton

Dynamic Binary Analysis (DBA) framework

Uncompyle

Decompile Python 2.7 binaries (.pyc)

Windows debugger distributed by Microsoft

Program that can copy executables with execute, but no read permission

Z3

A theorem prover from Microsoft Research

A Javascript malware analysis tool

Analyze obfuscated Javascript code

RABCDAsm

Collection of utilities including an ActionScript 3 assembler/disassembler

Collection of utilities to work with SWF files

A Python script for analyzing Flash files

Cross-Site WebSocket Hijacking Tester

Lets you inspect http requests to a particular url

Aperi'Solve is a platform which performs layer analysis on image (open-source)

Convert images b/w formats and apply filters

Shows EXIF information in JPEG files

Read and write meta information in files

Image metadata manipulation tool

Embeds text and files in images with optional encryption. Easy-to-use UI

This is a client-side Javascript tool to steganographically hide images inside the lower "bits" of other images

Tool for manipulating images

Universal steganographic tool

For various analysis related to PNGs

SmartDeblur

Used to deblur and fix defocused images

Tool for stegano analysis written in Java

Online steganography encoder and decoder

Launches brute-force dictionary attacks on JPG image

StegCracker

Steganography brute-force utility to uncover hidden data inside files

stegextract

Detect hidden files and text in images

Hide data in various kind of images

Conduct a wide range of image steganography operations, such as concealing/revealing files hidden within bits (open-source)

Apply various steganography techniques to images

Zsteg

PNG/BMP analysis

A graphical tool to testing website security

Commix

Automated All-in-One OS Command Injection and Exploitation Tool

Firefox addon for easy web exploitation

Intercepting proxy to replay, debug, and fuzz HTTP requests and responses

Add on for chrome for debugging network requests

Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

SQLMap

Automatic SQL injection and database takeover tool

W3af

Web Application Attack and Audit Framework

Automated XSS testor

Based on Debian

Based on Ubuntu

Based on Arch Linux

Based on Fedora

Based on Debian

Based on Debian

Based on Gentoo

Based on openSUSE

Based on Slackware

Flare VM

Based on Windows

Based on Debian

CTF Tools

Collection of setup scripts to install various security research tools

LazyKali

A 2016 refresh of LazyKali which simplifies install of tools and configuration

Field Guide by Trails of Bits

Start Guide maintained by community

Short guideline for CTF beginners by Endgame

A free course that teaches beginners the basics of forensics, crypto, and web-ex

Video tutorials and walkthroughs of popular CTF platforms

Video tutorials on Exploitation

MIPT CTF

A small course for beginners in CTFs (in Russian)

Security Platform by SDSLabs

Reverse Engineering Challenges

Fun cryptography challenges

Online CTF with a variety of targets to attack

Variety of VMs to learn variety of computer security issues

Variety of VMs to learn variety of computer security issues

Gracker

Binary challenges having a slow learning curve, and write-ups for each level

Weekly CTFs for all types of security enthusiasts

Training ground for hackers

CTF from HackerOne

Ethical hacking, computer network and security challenge platform

Web challenges starting from basic ones

Wargame for binary challenges

Embedded security CTF

Wargame maintained by OvertheWire Community

Variety of VM and online challenges (paid)

All year round ctf game. Questions from the yearly picoCTF competition

Binary Exploitation Wargame

Pwn Game

Binary wargame

Binary Exploitation Wargame

Reversing challenge

Ringzer0 Team Online CTF

Hacking and Information Security learning platform

ROP Wargames

ROP Wargames

Challenges with a holiday theme released annually and maintained by SANS

A variety of wargames maintained by the SmashTheStack Community

Various amazing CTF challenges, in many different categories. Has both Practice mode and Contest mode

VM-based for practical in digital security, computer application & network administration

A penetration testing training platform, which offers various computer challenges, in various categories

Hacking challenges for web

PHP/MySQL web application that is damn vulnerable

Juice Shop CTF

Scripts and tools for hosting a CTF on easily

Awesome CTF Cheatsheet

CTF Cheatsheet

General information on CTF occuring around the worlds

Reddit CTF category

Chinese resources to learn CTF

Wiki from team bi0s

CTF tips and tricks

ISIS Lab

CTF Wiki by Isis lab

OpenToAll

CTF tips by OTA CTF team members

0e85dc6eaf

Write-ups for CTF challenges by 0e85dc6eaf

Dumped CTF challenges and materials by psifertex

CTF challenges + write-ups archive maintained by the community

CTFTime Scrapper

Scraps all writeup from CTF Time and organize which to read first

HackThisSite

CTF write-ups repo maintained by HackThisSite team

Mzfr

CTF competition write-ups by mzfr

pwntools writeups

A collection of CTF write-ups all using pwntools

SababaSec

A collection of CTF write-ups by the SababaSec team

CTF challenge archive maintained by Jonathan Salwan

Smoke Leet Everyday

CTF write-ups repo maintained by SmokeLeetEveryday team