Advanced CTF Toolset
Join my telegram for more content:
t.me/rootacessacademy
Binary Analysis & Symbolic Execution (Pwn/Reverse)
1. angr a powerful framework for symbolic execution and static analysis of binary files. It helps automatically find the conditions to obtain the flag by "solving" code execution paths.
2. Rizin a modern and stable fork of radare2. Excellent for writing reverse engineering automation scripts in Python (via rz-pipe).
Exploit Development & Debugging (Pwn)
1. GEF a GDB extension that turns the standard debugger into a powerful context visualization tool for the stack, heap, registers, and instructions.
2. libc-database a database that allows you to determine the exact libc version on a remote server and calculate all offsets based on a few known leaks.
Cryptography (Crypto)
1. SageMath the "heavy artillery" of cryptography. Used for attacks on elliptic curves, solving systems of equations, and working with lattices (Lattice-based attacks).
2. RsaCtfTool an automated toolkit for RSA attacks. It contains dozens of implemented factorization algorithms and weak key detection methods.
3. Hashcat the fastest tool for password recovery and hash cracking, leveraging the power of GPUs.
Web Exploitation (Web)
1. Caido a modern, extremely fast proxy tool written in Rust. An effective alternative to Burp Suite for those who value speed and minimalism.
2. Commix a tool for the automated discovery and exploitation of Command Injection vulnerabilities (OS command injection).
3. XSStrike an advanced XSS scanner that analyzes the page context and generates unique payloads instead of relying on simple dictionary brute-forcing.
Forensics & Stegano (DFIR/Stego)
1. Volatility 3 the industry standard for RAM dump analysis. It allows the extraction of browser history, passwords, and active processes.
2. zsteg the best tool for detecting hidden data in the LSB (Least Significant Bit) channels of images (PNG/BMP).
3. CyberChef a web application for any kind of data manipulation: encoding, encryption, parsing, and logical operations, all within a single window.