awesome-ctf

CTF toolkit

A curated collection of tools and resources for Capture The Flag (CTF) challenges and related security activities

A curated list of CTF frameworks, libraries, resources and softwares

GitHub

10k stars
285 watching
1k forks
Language: JavaScript
last commit: about 2 years ago
Linked from 13 awesome lists

awesomectfpenetrationsecurity

Screenshot of apsdehal/awesome-ctf website

apsdehal.in/awesome-ctf/

Create

Kali Linux CTF BlueprintsOnline book on building, testing, and customizing your own Capture the Flag challenges

Create / Forensics

Dnscat23,468over 2 years agoHosts communication through DNS
Kroll Artifact Parser and Extractor (KAPE)Triage program
Magnet AXIOMArtifact-centric DFIR tool
Registry DumperDump your registry

Create / Platforms

CTFd5,756almost 2 years agoPlatform to host jeopardy style CTFs from ISISLab, NYU Tandon
echoCTF.RED115almost 2 years agoDevelop, deploy and maintain your own CTF infrastructure
FBCTF6,536almost 3 years agoPlatform to host Capture the Flag competitions from Facebook
Haaukins188almost 2 years agoA Highly Accessible and Automated Virtualization Platform for Security Education
HackTheArch67over 3 years agoCTF scoring platform
Mellivora443almost 3 years agoA CTF engine written in PHP
MotherFucking-CTF49over 7 years agoBadass lightweight plaform to host CTFs. No JS involved
NightShade121over 9 years agoA simple security CTF framework
OpenCTF81over 3 years agoCTF in a box. Minimal setup required
PicoCTF288over 2 years agoThe platform used to run picoCTF. A great framework to host any CTF
PyChallFactory107almost 2 years agoSmall framework to create/manage/package jeopardy CTF challenges
RootTheBox944almost 2 years agoA Game of Hackers (CTF Scoreboard & Game Manager)
Scorebot50about 9 years agoPlatform for CTFs by Legitbs (Defcon)
SecGen2,646almost 2 years agoSecurity Scenario Generator. Creates randomly vulnerable virtual machines

Create / Web

Metasploit JavaScript Obfuscator34,393almost 2 years ago
Uglify13,199almost 2 years ago

Solve / Attacks

Bettercap16,919almost 2 years agoFramework to perform MITM (Man in the Middle) attacks
Yersinia732about 3 years agoAttack various protocols on layer 2

Solve / Crypto

CyberChefWeb app for analysing and decoding data
FeatherDuster1,095almost 5 years agoAn automated, modular cryptanalysis tool
Hash Extender1,090about 3 years agoA utility tool for performing hash length extension attacks
padding-oracle-attacker204over 3 years agoA CLI tool to execute padding oracle attacks
PkCrackA tool for Breaking PkZip-encryption
QuipQuipAn online tool for breaking substitution ciphers or vigenere ciphers (without key)
RSACTFTool5,800almost 2 years agoA tool for recovering RSA private key with various attack
RSATool1,232almost 2 years agoGenerate private key with knowledge of p and q
XORTool1,402over 3 years agoA tool to analyze multi-byte xor cipher

Solve / Bruteforcers

HashcatPassword Cracker
HydraA parallelized login cracker which supports numerous protocols to attack
John The Jumbo10,458almost 2 years agoCommunity enhanced version of John the Ripper
John The RipperPassword Cracker
Nozzlr62over 3 years agoNozzlr is a bruteforce framework, trully modular and script-friendly
OphcrackWindows password cracker based on rainbow tables
Patator3,598almost 2 years agoPatator is a multi-purpose brute-forcer, with a modular design
Turbo IntruderBurp Suite extension for sending large numbers of HTTP requests

Solve / Exploits

DLLInjector490over 13 years agoInject dlls in processes
libformatstr339almost 5 years agoSimplify format string exploitation
MetasploitPenetration testing software

Solve / Exploits / Metasploit

Cheatsheet

Solve / Exploits

one_gadget2,089almost 2 years agoA tool to find the one gadget call
Pwntools12,204almost 2 years agoCTF Framework for writing exploits
Qira3,969about 4 years agoQEMU Interactive Runtime Analyser
ROP Gadget3,975almost 2 years agoFramework for ROP exploitation
V0lt366over 8 years agoSecurity CTF Toolkit

Solve / Forensics

Aircrack-NgCrack 802.11 WEP and WPA-PSK keys
AudacityAnalyze sound files (mp3, m4a, whatever)
Bkhive and Samdump2Dump SYSTEM and SAM files
CFF ExplorerPE Editor
Creddump245over 7 years agoDump windows credentials
DVCS Ripper1,712about 2 years agoRips web accessible (distributed) version control systems
Exif ToolRead, write and edit file metadata
ExtundeleteUsed for recovering lost data from mountable images
Fibratus2,246almost 2 years agoTool for exploration and tracing of the Windows kernel
ForemostExtract particular kind of files using headers
Fsck.ext4Used to fix corrupt filesystems
MalzillaMalware hunting tool
NetworkMinerNetwork Forensic Analysis Tool
PDF Streams InflaterFind and extract zlib files compressed in PDF files
PngcheckVerifies the integrity of PNG and dump all of the chunk-level information in human-readable form
ResourcesExtractExtract various filetypes from exes
Shellbags151over 3 years agoInvestigate NT_USER.dat files
SnowA Whitespace Steganography Tool
USBRip1,154almost 4 years agoSimple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
Volatility7,412over 3 years agoTo investigate memory dumps
WiresharkUsed to analyze pcap or pcapng files
OfflineRegistryViewSimple tool for Windows that allows you to read offline Registry files from external drive and view the desired Registry key in .reg file format
Registry Viewer®Used to view Windows registries

Solve / Networking

Masscan23,823almost 2 years agoMass IP port scanner, TCP port scanner
MonitA linux tool to check a host on the network (and other non-network activities)
Nipe1,970almost 2 years agoNipe is a script to make Tor Network your default gateway
NmapAn open source utility for network discovery and security auditing
WiresharkAnalyze the network dumps
ZeekAn open-source network security monitor
ZmapAn open-source network scanner

Solve / Reversing

Androguard5,324almost 2 years agoReverse engineer Android applications
Angr7,647almost 2 years agoplatform-agnostic binary analysis framework
Apk2Gold676over 2 years agoYet another Android decompiler
ApkToolAndroid Decompiler
Barf1,413almost 7 years agoBinary Analysis and Reverse engineering Framework
Binary NinjaBinary analysis framework
BinUtilsCollection of binary tools
BinWalk11,530almost 2 years agoAnalyze, reverse engineer, and extract firmware images
Boomerang377over 5 years agoDecompile x86/SPARC/PowerPC/ST-20 binaries to C
ctf_import110almost 10 years ago– run basic functions from stripped binaries cross platform
cwe_checker1,155almost 2 years agocwe_checker finds vulnerable patterns in binary executables
demovfuscator709over 2 years agoA work-in-progress deobfuscator for movfuscated binaries
FridaDynamic Code Injection
GDBThe GNU project debugger
GEF7,088almost 2 years agoGDB plugin
GhidraOpen Source suite of reverse engineering tools. Similar to IDA Pro
HopperReverse engineering tool (disassembler) for OSX and Linux
IDA ProMost used Reversing software
Jadx42,178almost 2 years agoDecompile Android files
Java DecompilersAn online decompiler for Java and Android APKs
Krakatau2,003almost 2 years agoJava decompiler and disassembler
Objection7,624about 2 years agoRuntime Mobile Exploration
PEDA5,911about 2 years agoGDB plugin (only python2.7)
PinA dynamic binary instrumentaion tool by Intel
PINCE2,151almost 2 years agoGDB front-end/reverse engineering tool, focused on game-hacking and automation
PinCTF496over 6 years agoA tool which uses intel pin for Side Channel Analysis
Plasma3,050about 5 years agoAn interactive disassembler for x86/ARM/MIPS which can generate indented pseudo-code with colored syntax
Pwndbg7,760almost 2 years agoA GDB plugin that provides a suite of utilities to hack around GDB easily
radare220,862almost 2 years agoA portable reversing framework
Triton3,565almost 2 years agoDynamic Binary Analysis (DBA) framework
Uncompyle423over 9 years agoDecompile Python 2.7 binaries (.pyc)
WinDbgWindows debugger distributed by Microsoft
XocopyProgram that can copy executables with execute, but no read permission
Z310,452almost 2 years agoA theorem prover from Microsoft Research
DetoxA Javascript malware analysis tool
ReveloAnalyze obfuscated Javascript code
RABCDAsm431over 3 years agoCollection of utilities including an ActionScript 3 assembler/disassembler
SwftoolsCollection of utilities to work with SWF files
XxxswfA Python script for analyzing Flash files

Solve / Services

CSWSHCross-Site WebSocket Hijacking Tester
Request BinLets you inspect http requests to a particular url

Solve / Steganography

AperiSolveAperi'Solve is a platform which performs layer analysis on image (open-source)
ConvertConvert images b/w formats and apply filters
ExifShows EXIF information in JPEG files
ExiftoolRead and write meta information in files
Exiv2Image metadata manipulation tool
Image SteganographyEmbeds text and files in images with optional encryption. Easy-to-use UI
Image Steganography OnlineThis is a client-side Javascript tool to steganographically hide images inside the lower "bits" of other images
ImageMagickTool for manipulating images
OutguessUniversal steganographic tool
PngtoolsFor various analysis related to PNGs
SmartDeblur2,342over 7 years agoUsed to deblur and fix defocused images
SteganabaraTool for stegano analysis written in Java
SteganographyOnlineOnline steganography encoder and decoder
StegbreakLaunches brute-force dictionary attacks on JPG image
StegCracker557over 5 years agoSteganography brute-force utility to uncover hidden data inside files
stegextract116over 3 years agoDetect hidden files and text in images
SteghideHide data in various kind of images
StegOnlineConduct a wide range of image steganography operations, such as concealing/revealing files hidden within bits (open-source)
StegsolveApply various steganography techniques to images
Zsteg1,333over 2 years agoPNG/BMP analysis

Solve / Web

BurpSuiteA graphical tool to testing website security
Commix4,647almost 2 years agoAutomated All-in-One OS Command Injection and Exploitation Tool
HackbarFirefox addon for easy web exploitation
OWASP ZAPIntercepting proxy to replay, debug, and fuzz HTTP requests and responses
PostmanAdd on for chrome for debugging network requests
Raccoon3,105over 2 years agoA high performance offensive security tool for reconnaissance and vulnerability scanning
SQLMap32,841almost 2 years agoAutomatic SQL injection and database takeover tool
W3af4,613over 3 years agoWeb Application Attack and Audit Framework
XSSerAutomated XSS testor

Resources / Operating Systems

Android TamerBased on Debian
BackBoxBased on Ubuntu
BlackArch LinuxBased on Arch Linux
Fedora Security LabBased on Fedora
Kali LinuxBased on Debian
Parrot Security OSBased on Debian
PentooBased on Gentoo
URIX OSBased on openSUSE
WifislaxBased on Slackware
Flare VM6,686almost 2 years agoBased on Windows
REMnuxBased on Debian

Resources / Starter Packs

CTF Tools8,580almost 3 years agoCollection of setup scripts to install various security research tools
LazyKali47about 10 years agoA 2016 refresh of LazyKali which simplifies install of tools and configuration

Resources / Tutorials

CTF Field GuideField Guide by Trails of Bits
CTF ResourcesStart Guide maintained by community
How to Get Started in CTFShort guideline for CTF beginners by Endgame
Intro. to CTF CourseA free course that teaches beginners the basics of forensics, crypto, and web-ex
IppSecVideo tutorials and walkthroughs of popular CTF platforms
LiveOverFlowVideo tutorials on Exploitation
MIPT CTF271over 4 years agoA small course for beginners in CTFs (in Russian)

Resources / Wargames

BackdoorSecurity Platform by SDSLabs
CrackmesReverse Engineering Challenges
CryptoHackFun cryptography challenges
echoCTF.REDOnline CTF with a variety of targets to attack
Exploit ExercisesVariety of VMs to learn variety of computer security issues
Exploit.EducationVariety of VMs to learn variety of computer security issues
Gracker9almost 15 years agoBinary challenges having a slow learning curve, and write-ups for each level
Hack The BoxWeekly CTFs for all types of security enthusiasts
Hack This SiteTraining ground for hackers
Hacker101CTF from HackerOne
Hacking-LabEthical hacking, computer network and security challenge platform
Hone Your Ninja SkillsWeb challenges starting from basic ones
IOWargame for binary challenges
MicrocorruptionEmbedded security CTF
Over The WireWargame maintained by OvertheWire Community
PentesterLabVariety of VM and online challenges (paid)
PicoCTFAll year round ctf game. Questions from the yearly picoCTF competition
PWN ChallengeBinary Exploitation Wargame
Pwnable.krPwn Game
Pwnable.twBinary wargame
Pwnable.xyzBinary Exploitation Wargame
Reversin.krReversing challenge
Ringzer0TeamRingzer0 Team Online CTF
Root-MeHacking and Information Security learning platform
ROP Wargames26about 9 years agoROP Wargames
SANS HHCChallenges with a holiday theme released annually and maintained by SANS
SmashTheStackA variety of wargames maintained by the SmashTheStack Community
Viblo CTFVarious amazing CTF challenges, in many different categories. Has both Practice mode and Contest mode
VulnHubVM-based for practical in digital security, computer application & network administration
W3ChallsA penetration testing training platform, which offers various computer challenges, in various categories
WebHackingHacking challenges for web
Damn Vulnerable Web ApplicationPHP/MySQL web application that is damn vulnerable
Juice Shop CTF412almost 2 years agoScripts and tools for hosting a CTF on easily

Resources / Websites

Awesome CTF Cheatsheet54over 2 years agoCTF Cheatsheet
CTF TimeGeneral information on CTF occuring around the worlds
Reddit Security CTFReddit CTF category

Resources / Wikis

BamboofoxChinese resources to learn CTF
bi0s WikiWiki from team bi0s
CTF CheatsheetCTF tips and tricks
ISIS Lab385about 13 years agoCTF Wiki by Isis lab
OpenToAll135almost 7 years agoCTF tips by OTA CTF team members

Resources / Writeups Collections

0e85dc6eaf95over 6 years agoWrite-ups for CTF challenges by 0e85dc6eaf
CaptfDumped CTF challenges and materials by psifertex
CTF write-ups (community)CTF challenges + write-ups archive maintained by the community
CTFTime Scrapper31over 9 years agoScraps all writeup from CTF Time and organize which to read first
HackThisSite247over 5 years agoCTF write-ups repo maintained by HackThisSite team
Mzfr122about 4 years agoCTF competition write-ups by mzfr
pwntools writeups507almost 10 years agoA collection of CTF write-ups all using pwntools
SababaSec19over 3 years agoA collection of CTF write-ups by the SababaSec team
Shell StormCTF challenge archive maintained by Jonathan Salwan
Smoke Leet Everyday186almost 9 years agoCTF write-ups repo maintained by SmokeLeetEveryday team

Backlinks from these awesome lists:

More related projects: