https://ha1fdan.xyz/en/tags/tools/Recent content in Tools on Ha1fdanHugoen-usha1fdan.xyzTue, 05 Mar 2024 11:27:41 +0100https://ha1fdan.xyz/en/toolbox/Tue, 05 Mar 2024 11:27:41 +0100https://ha1fdan.xyz/en/toolbox/<p><strong>In general if I stumble into a challenge I need a vulnerability I will try to search <a href="https://book.hacktricks.xyz/">hacktricks</a></strong></p> <h2 id="cryptography">Cryptography</h2> <ul> <li>Substitution cipher or vigenere ciphers (without key): <a href="https://quipqiup.com/">quipqiup.com</a></li> <li>SageMath: <a href="https://www.sagemath.org/">sagemath.org</a></li> <li>Generate private key with knowledge of p and q: <a href="https://github.com/ius/rsatool">RSATool</a></li> <li>CyberChef: <a href="https://cyberchef.org/">cyberchef.org</a></li> <li>RsaCtfTool: <a href="https://github.com/RsaCtfTool/RsaCtfTool">RsaCtfTool</a> - RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data</li> </ul> <h2 id="forensics">Forensics</h2> <ul> <li>Autopsy: <a href="https://www.autopsy.com/download/">autopsy.com</a></li> <li>EXIF Viewer: <a href="https://onlineexifviewer.com/">onlineexifviewer.com</a></li> <li>Hydra - FTP/SSH bruteforce</li> <li>Crackstation: <a href="https://crackstation.net/">crackstation.net</a></li> <li>Analyze audio files: <a href="http://sourceforge.net/projects/audacity/">Audacity</a> - <code>apt-get install audacity</code></li> <li>Find and extract zlib files compressed in PDF files: <a href="http://malzilla.sourceforge.net/downloads.html">PDF Streams Inflater</a></li> <li>Used to analyze pcap or pcapng files: <a href="https://www.wireshark.org">Wireshark</a></li> <li>Binwalk: <a href="https://github.com/ReFirmLabs/binwalk">binwalk.org</a></li> <li>Foremost: <a href="https://github.com/korczis/foremost">foremost</a></li> <li>Volatility: <a href="https://github.com/volatilityfoundation/volatility">volatility</a> - An advanced memory forensics framework</li> <li>Windows EVTX: <a href="https://omerbenamram.github.io/evtx/">EVTX Viewer Online</a></li> <li><a href="https://ericzimmerman.github.io">https://ericzimmerman.github.io</a></li> </ul> <h2 id="stegonography">Stegonography</h2> <ul> <li>StegOnline: <a href="https://georgeom.net/StegOnline/upload">StegOnline</a></li> <li>Stegsolve: <a href="http://www.caesum.com/handbook/Stegsolve.jar">Stegsolve</a></li> <li>stegseek: <a href="https://github.com/RickdeJager/stegseek">stegseek</a></li> <li>JPEG steganography: <a href="https://github.com/lukechampine/jsteg">jsteg</a></li> <li>zsteg: <a href="https://github.com/zed-0xff/zsteg">zsteg</a></li> <li>OpenStego: <a href="https://www.openstego.com/">OpenStego</a></li> <li>Aperi&rsquo;Solve: <a href="https://aperisolve.com/">aperisolve.com</a> or <a href="https://github.com/Zeecka/AperiSolve">local@github</a></li> </ul> <h2 id="osint">OSINT</h2> <ul> <li>sherlock (social media accounts): <a href="https://github.com/sherlock-project/sherlock">github.com/sherlock-project/sherlock</a></li> <li>theHarvester <a href="https://github.com/laramies/theHarvester">github.com/laramies/theHarvester</a></li> <li>Google Images: <a href="https://images.google.com/">images.google.com</a></li> <li>Whois History: <a href="https://osint.sh/whoishistory/">osint.sh/whoishistory</a></li> <li>DNS Dumpster: <a href="https://dnsdumpster.com/">dnsdumpster.com</a></li> <li>crt.sh - Certificate Search: <a href="https://crt.sh">crt.sh</a></li> <li>pimeyes: <a href="https://pimeyes.com/">pimeyes.com</a> - Face Search Engine Reverse Image Search</li> <li>Shodan: <a href="https://shodan.io">shodan.io</a> - Search for vulnerabilities on publicly exposed services</li> <li>SpiderFoot: <a href="https://github.com/smicallef/spiderfoot">spiderfoot</a></li> </ul> <h2 id="misc">Misc</h2> <ul> <li>Nothing yet.</li> </ul> <h2 id="reverse-engineering">Reverse Engineering</h2> <ul> <li>GDB: <code>apt install gbd</code></li> <li>Ghidra: <a href="https://github.com/NationalSecurityAgency/ghidra/">github.com/NationalSecurityAgency/ghidra/</a></li> <li>IDA: <a href="https://hex-rays.com/ida-free/">hex-rays.com/ida-free</a></li> <li>Regex: <a href="https://regex101.com/">regex101.com</a></li> <li>Decompiler Explorer: <a href="https://dogbolt.org/">dogbolt.org</a></li> <li>radare2: <a href="https://github.com/radareorg/radare2">radare2</a> - UNIX-like reverse engineering framework and command-line toolset</li> <li>.NET decompiler: <a href="https://decompiler.codemerx.com/">CodemerxDecompile</a></li> <li>Program for determining types of files for Windows, Linux and MacOS. <a href="https://github.com/horsicq/DIE-engine/releases">Detect It Easy</a></li> </ul> <h2 id="python-reverse-engineering">Python Reverse Engineering</h2> <ul> <li>Python bytecode decompiler (.pyc): <a href="https://pylingual.io/">https://pylingual.io/</a></li> <li>PyInstaller Extractor: <a href="https://pyinstxtractor-web.netlify.app/">https://pyinstxtractor-web.netlify.app/</a></li> </ul> <h2 id="web-exploitation">Web Exploitation</h2> <ul> <li>DirBuster: <a href="https://www.kali.org/tools/dirbuster/">www.kali.org/tools/dirbuster</a></li> <li>BurpSuite: <a href="https://portswigger.net/burp">BurpSuite</a></li> <li>SQLMap: <a href="https://github.com/sqlmapproject/sqlmap">SQLMap</a></li> <li>Postman: <a href="https://www.postman.com/downloads/">Postman</a></li> <li>domain.ltd/<strong>robots.txt</strong></li> </ul> <h2 id="pentesting">Pentesting</h2> <ul> <li>HackTricks: <a href="https://book.hacktricks.xyz">https://book.hacktricks.xyz</a></li> <li>Nmap: <a href="https://nmap.org/">https://nmap.org/</a></li> <li>Metasploit: <a href="https://www.metasploit.com/">https://www.metasploit.com/</a></li> <li>gobuster: <a href="https://github.com/OJ/gobuster">gobuster</a></li> </ul>