Skip to content

Instantly share code, notes, and snippets.

@0xBADCA7
Forked from ZetaTwo/tools.md
Created March 10, 2019 07:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save 0xBADCA7/79930b8b3206749bf83bb11ab026d6f3 to your computer and use it in GitHub Desktop.
Save 0xBADCA7/79930b8b3206749bf83bb11ab026d6f3 to your computer and use it in GitHub Desktop.
CTF/Hacking tools - Tools I use for security related work

General purpose

010 Editor - Hex editor
Sublime - Text editor
Terminator - Terminal emulator

Low-level reversing

IDA - Reversing IDE
binaryninja - Reversing IDE
capstone - Disassembly framework
unicorn - cpu emulator framework
angr - Reversing tools
angr-utils - CFG for angr
manticore - Symbolic execution engine
Frida - JS/Python hooking library
Intel PIN - Instrumentation, instruction count
Watcom - 16-bit DOS debugger
qemu - Emulator
upx-ucl - Common packer/unpacker
Tracer - Tool for generating execution traces of a running process
no$gmb - Game Boy debugger

High-level reversing

uncompyle2 - Python disassembler & decompiler
pycdc - Python disassembler & decompiler
bytecode-viewer - Android/Java decompiler
apktool - Android reversing
Dotpeek - .NET decompiler
dnSpy - .NET debug/decompile
trepan2 - Python debugger

Forensics

JohnTheRipper - password cracking
extundelete - File recovery for EXT
Volatility - Memory forensics

Networking

Wireshark - Network traffic analyzer
Tshark - CLI network traffic analyzer
NetworkMiner - PCAP file carver
nmap - Network scanner
socat - SOcket CAT
ngrok - Public reverse proxy

File formats

binwalk - File type analyzer
oletools - Parse OLE files (old Office)
PNGAnalyzer - PNG file analyzer
JPEGsnoop - JPEG file analyzer
Gimp - Image processing
Audacity - Audio processing
origami - PDF analysis framework
zbarimg - QR code reader

DSP

GNU Radio - Signals processing
grc - GNU Radio Companion, IDE for GNU radio
baudline - Signal processing

Web

nikto - Web scanner
dvcs-ripper - Version control downloader
NoSQLMap - NoSQL injection scanner
sqlmap - SQL injection scanner
wpscan - Wordpress vuln scanner
zap - OWASP web scanner
CeWL - Wordlist spider
proxychains - Tor proxying

Math/general science

z3 - SMT solver
sagemath - Math library
graphviz - Graph visualization
matplotlib - Python plot library
scipy/numpy - scientific Python

Exploitation

pwndbg - gdb plugin
preeny - preload libraries for exploitation
ROPgadget - Find ROP gadgets
cgc2elf - Convert CGC to ELF executable
pwntools - Tools and library for pwning
AFL - Fuzzing tool

Libraries/other

Pillow - Python image library

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment