CTFs

Notes and files regarding CTFs/wargames I've participated in.

Included CTFs

• CDDC 2018
• Google CTF 2018
• Hackerfire
• IoT CTF 2018
• pwnable.kr

Tools and resources

Lists

https://github.com/danielmiessler/SecLists

AIO

https://gchq.github.io/CyberChef

Forensics

https://github.com/volatilityfoundation/volatility (memory dump)

Network

https://www.wireshark.org/

https://www.netresec.com/?page=networkminer

Steganography

https://github.com/DominicBreuker/stego-toolkit

https://github.com/dhsdshdhk/stegpy

https://github.com/zed-0xff/zsteg

https://github.com/maxcruz/stegano_midi (for MIDI)

Steganography (audio)

https://www.audacityteam.org/

https://academo.org/demos/spectrum-analyzer/ (Spectrum analysis)

http://spek.cc/ (spectrum analysis)

Exploitation / auxiliary

https://github.com/rapid7/metasploit-framework

Port scan

https://github.com/nmap/nmap

https://github.com/robertdavidgraham/masscan

https://zmap.io/

URL fuzzing

https://github.com/xmendez/wfuzz

URL discovery

https://github.com/OJ/gobuster

Cryptography

https://www.dcode.fr/tools-list (A bunch of cipher solvers)

https://www.guballa.de/substitution-solver (Automatic substitution cipher solver)

https://www.boxentriq.com/code-breaking/cryptogram (Automatic cipher solver)

https://github.com/Ganapati/RsaCtfTool (RSA attack tool)

Number theory

http://factordb.com (factorizations)

https://www.alpertron.com.ar/JAVAPROG.HTM (A bunch of factorization calculators)

https://sagecell.sagemath.org/ (SageMath)

OSINT

https://github.com/laramies/theHarvester

https://osintframework.com

https://namechk.com (for searching social media usernames)

https://tineye.com/ (for reverse image searches)

https://github.com/sherlock-project/sherlock

DNS

nslookup

host

dig

https://tools.dnsstuff.com/

https://toolbox.googleapps.com/

https://dnsdumpster.com/ (DNS searching)

https://github.com/TheRook/subbrute (enumerates subdomains)

https://github.com/aboul3la/Sublist3r (enumerates subdomains)

https://github.com/guelfoweb/knock (enumerates subdomains)

Packet analysis

https://www.netresec.com/?page=NetworkMiner

https://www.wireshark.org/

Programming

https://repl.it/

https://github.com/graue/esofiles (esoteric programming languages)

http://shell-storm.org/online/Online-Assembler-and-Disassembler/

Cracking

https://hashcat.net/hashcat/

https://www.openwall.com/john/

https://crackstation.net/

https://quipqiup.com/

SQL

http://sqlmap.org/ (automatic penetration of SQL databases)