Skip to content

Instantly share code, notes, and snippets.

@ZetaTwo
Last active July 23, 2024 21:11
Show Gist options
  • Save ZetaTwo/40976c9ed8b9abb81e44c872b3a68551 to your computer and use it in GitHub Desktop.
Save ZetaTwo/40976c9ed8b9abb81e44c872b3a68551 to your computer and use it in GitHub Desktop.
CTF/Hacking tools - Tools I use for security related work

General purpose

Terminator - Terminal emulator
zsh - My shell of choice prezto - Configuration management for zsh

Editors

010 Editor - Hex editor
VSCode - Text editor

Low-level reversing

IDA - Reversing IDE
Binary Ninja - Reversing IDE
Ghidra - Reversing IDE
capstone - Disassembly framework
unicorn - CPU emulator framework
keystone - assembler framework angr - Reversing tools
manticore - Symbolic execution engine
Frida - JS/Python hooking library
Intel PIN - Instrumentation, instruction count
Tracer - Tool for generating execution traces of a running process
qemu - Emulator

Odd architectures

Watcom - 16-bit DOS debugger
dosbox - DOS Emulator
no$gmb - Game Boy emulator w/ debugger
fceux - NES emulator w/ debugger

High-level reversing

uncompyle6 - Python disassembler & decompiler
bytecode-viewer - Android/Java decompiler
apktool - Android reversing
dnSpy - .NET debug/decompile
trepan2 - Python debugger

Forensics

JohnTheRipper - password cracking
extundelete - File recovery for EXT
Volatility - Memory forensics

Networking

Wireshark - Network traffic analyzer
Tshark - CLI network traffic analyzer
NetworkMiner - PCAP file carver
nmap - Network scanner
socat - SOcket CAT
ngrok - Public reverse proxy

File formats

binwalk - File type analyzer
oletools - Parse OLE files (old Office)
PNGAnalyzer - PNG file analyzer
JPEGsnoop - JPEG file analyzer
Gimp - Image processing
Audacity - Audio processing
origami - PDF analysis framework
zbarimg - QR code reader

DSP

GNU Radio - Signals processing
grc - GNU Radio Companion, IDE for GNU radio
baudline - Signal processing GUI
sigrok - Signal analysis

Web

Burp Suite - Web attack framework
dvcs-ripper - Version control downloader
sqlmap - SQL injection scanner
NoSQLMap - NoSQL injection scanner
wpscan - Wordpress vuln scanner
zap - OWASP web scanner
proxychains - Tor proxying

Math/general science

z3 - SMT solver
sagemath - Math library
graphviz - Graph visualization
matplotlib - Python plot library
scipy/numpy - scientific Python

Cryptography

RsaCtfTool - Various attacks and tools on RSA

Exploitation

pwndbg - gdb plugin
preeny - preload libraries for exploitation
rp++
ROPgadget - Find ROP gadgets
pwntools - Tools and library for pwning
AFL - Fuzzing tool

Libraries/other

Pillow - Python image library

Legacy (stuff I no longer find useful)

cgc2elf - Convert CGC to ELF executable
nikto - Web scanner
CeWL - Wordlist spider
pycdc - Python disassembler & decompiler
Dotpeek - .NET decompiler
radare2 - Reversing framework
angr-utils - CFG for angr
upx-ucl - Common packer/unpacker

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment