| Les deux révisions précédentes
Révision précédente
Prochaine révision
|
Révision précédente
|
ctf:public:tools [2016/10/16 03:32]
arthaum |
ctf:public:tools [2020/11/07 19:26]
benaimg hoppscotch |
| * [[https://github.com/arthaud/formatstring|python-formatstring]], a library to exploit format string vulnerabilities in python | * [[https://github.com/arthaud/formatstring|python-formatstring]], a library to exploit format string vulnerabilities in python |
| * [[http://www.nasm.us/|nasm]], an assembler for x86 and amd64. | * [[http://www.nasm.us/|nasm]], an assembler for x86 and amd64. |
| | * [[https://github.com/sashs/Ropper|ropper]], a tool to find gadgets to write ROP chains |
| |
| ===== Cryptography ===== | ===== Cryptography ===== |
| ===== Web ===== | ===== Web ===== |
| |
| * [[http://jsbeautifier.org/|jsbeautifier]], a too to beautify/deobfuscate javascript. | ==== Client Side ==== |
| | |
| | * [[http://jsbeautifier.org/|jsbeautifier]], a tool to beautify/deobfuscate javascript. |
| * [[https://www.free-decompiler.com/flash/|jpexs flash decompiler]], a flash decompiler. | * [[https://www.free-decompiler.com/flash/|jpexs flash decompiler]], a flash decompiler. |
| | * [[http://utf-8.jp/public/jjencode.html|jjencode]], to encode/decode javascript using symbols only. |
| | |
| | ==== Server side ==== |
| | |
| * [[http://docs.python-requests.org/en/master/|python requests]], a library to craft http requests in python. | * [[http://docs.python-requests.org/en/master/|python requests]], a library to craft http requests in python. |
| * [[https://www.owasp.org/index.php/Category:OWASP_DirBuster_Project|DirBuster]], a multi threaded java application designed to brute force directories and files names. | * [[https://www.owasp.org/index.php/Category:OWASP_DirBuster_Project|DirBuster]], a multi threaded java application designed to brute force directories and files names. |
| * [[http://sqlmap.org/|sqlmap]], the best tool to perform automatic SQL injections. | * [[http://sqlmap.org/|sqlmap]], the best tool to perform automatic SQL injections. |
| * [[http://wapiti.sourceforge.net/|wapiti]], a vulnerability scanner in python. | * [[http://wapiti.sourceforge.net/|wapiti]], a vulnerability scanner in python. |
| | * [[https://hoppscotch.io/ |hoppscotch.io]], a web app that does the same thing as curl and postman |
| | ===== Miscellaneous ===== |
| |
| | * [[http://www.openwall.com/john/|john the ripper]], a password cracker. |
| | * [[https://hashcat.net/hashcat/|hashcat]], another password cracker. |