Tool List
These are the majority of the tools that I commonly use in the National Cyber League Capture the Flag challenge. If a tool is displayed like this
, it likely came with your Linux install.
OSINT
OSINT Framework - Lots of links to OSINT oriented websites, such as flights, weather, and public records
Awesome OSINT - Lots of links to OSINT
TinEye - Reverse Image Search
exiftool - Image metadata viewer and editor
exiftool Online - Online version of exiftool
crt.sh - Certificate search tool
ICANN Lookup - Lookup domain registration data
Overpass Turbo - Advanced Map Search Engine
Cryptography
dCode - Lots of tools for cipher solving
Rumkin - Lots of tools for cipher solving
CyberChef - Lots of tools for data manipulation + ciphers
RSA Calculator/RSA Calculator - Manual RSA calculations
Ciphey - Cipher solver tool
Password Cracking
Name-That-Hash - Hash identification tool
Hashcat - GPU Password Cracker (Example Hashes)
John the Ripper - CPU Password Cracker
ophcrack - LM&NTLM Cracker based on precomputed rainbow tables (Use XP Special)
Hashcat Rules - Database of hashcat rules
wordlistctl - CLI tool to search for wordlists
pdf2john Online - Online tool to extract the password hash from a PDF
rar2john Online - Online tool to extract the password hash from a RAR file
zip2john Online - Online tool to extract the password hash from a ZIP file
7z2john Online - Online tool to extract the password hash from a 7z file
office2john Online - Online tool to extract the password hash from a Microsoft Office document
Wikidata Query Service - Tool to query data from Wikipedia for Wordlists
Forensics
binwalk - Extract files embedded inside other files
strings
- List user readable strings within a file.
Photorec - File Recovery Utility
Volatility - RAM analysis tool
WavSteg - Extract data from a WAV
Steghide - Steganography tool
StegOnline - Steganography tool (StegOnline Checklist)
OpenStego - Steganography tool
Digital Invisible Ink Toolkit - Steganography tool
FTK Imager - Disk dump analysis tool
Unredacter - Depixelate text
sherloq - Image Forensics
Log Analysis
cut
- Cut strings by a delimiter and select one part
uniq
- Deduplicates lines. -c
can be used to count the lines. (Be sure to sort first)
sort
- Sorts lines
awk
- Scripting language
gron - Make JSON greppable
jq - CLI JSON processor
LNAV - Log File Navigator
Python - Python, good for parsing JSON and custom binary data
LLMs - Good for writing Python scripts
Network Traffic Analysis
Wireshark - Network Protocol Analyzer
TShark - Wireshark but CLI
h264extractor - Wireshark plugin to extract an H264 stream
Scanning and Reconnaissance
nmap - TCP/UDP Scanning utility
dirbuster - Java-based website subfolder enumeration
gobuster - Go-based website subfolder enumeration
feroxbuster - Rust-based website subfolder enumeration
crt.sh - Certificate search tool
Web Application Exploitation
curl
- Make custom network requests. (Custom POST)
Burp Suite Community Edition - Intercept and change website requests.
Enumeration and Exploitation
Ghidra - Reverse Engineering Tool
Decompiler Explorer - See decompiler view from multiple tools
Buffer Overflow Pattern Generator - Calculate offsets of overwritten registers
Linguist - Language Detection Utility
pwndbg - GDB but useful
dotPeek - Decompiler for .NET applications
Vineflower - Decompiler for Java applications
uncompyle6 - Decompiler for Python Bytecode
crxviewer - View Chrome extension source