Tools
Welcome to my toolbox! This page lists a collection of curated, external web applications, projects, and resources that are highly useful for CTFs, OSINT investigations, reverse engineering, vulnerability scanning, and cybersecurity.
🌐 OSINT & Passive Reconnaissance
OSINT Framework
A directory of sources and tools for finding specific types of information (emails, domain names, IP addresses, social networks, etc.).
Web Check
An all-in-one OSINT tool for websites. Displays DNS records, server info, SSL certificates, headers, cookies, tech stack, and more.
DNSDumpster
A DNS research tool for discovering hosts related to a domain. Great for sub-domain mapping and passive recon.
Censys Search
An online search engine to query hosts, ports, and certificates across the entire IPv4 space.
BuiltWith
A website profiler tool to check the underlying technology stack, CMS, trackers, and libraries running on a target.
crt.sh
A certificate transparency log search engine. Very useful for passive subdomain extraction using SSL/TLS history.
Epieos
A reverse lookup tool that searches for Google accounts, calendars, and other services linked to an email or phone number.
Bellingcat Toolkit
The official research and investigation toolkit used by Bellingcat's investigative team.
⚔️ Pentesting & Network Security
Nmap
An open source utility for network discovery, port scanning, and vulnerability auditing.
Metasploit
The industry-standard penetration testing framework used to find, exploit, and validate vulnerabilities.
Bettercap
A complete, modular, and easily extensible framework to perform Man-in-the-Middle (MITM) attacks and network scanning.
Hydra
A parallelized login cracker supporting numerous protocols (SSH, FTP, HTTP, etc.) for fast online bruteforcing.
Masscan
An extremely fast TCP port scanner, capable of scanning the entire Internet in under 6 minutes.
GTFOBins
A curated list of Unix binaries that can be exploited to bypass local security restrictions and escalate privileges.
LOLBAS Project
Living Off The Land Binaries and Scripts. A curated database of native Windows binaries used to bypass detection or execute payloads.
The Hacker Recipes
A playbook-style knowledge base of attacks, focusing on Active Directory, network protocols, and hacking methodology.
Pentest AD Mindmap
A highly detailed Pentest Active Directory mindmap by Orange Cyberdefense, in dark SVG format. Great for planning AD attacks.
🕸️ Web Exploitation & Interception
Burp Suite
The leading graphical HTTP proxy, repeater, and intruder tool for auditing and exploiting web vulnerabilities.
SQLMap
An open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws.
OWASP ZAP
A popular open-source web application security scanner. Great alternative to Burp Suite.
Commix
Automated All-in-One OS Command Injection and Exploitation Tool.
Request Bin
Allows you to create a temporary URL to collect and inspect HTTP requests. Crucial for debugging SSRF or Webhooks.
⚙️ Reverse Engineering & Symbolic Execution
Ghidra
NSA's open-source suite of reverse engineering tools, including disassembly, assembly, decompilation, and graphing.
IDA Pro
One of the most widely used disassemblers and decompilers in the security industry.
Binary Ninja
A modern, clean reverse engineering platform with high-quality decompilation and API-first architecture.
Pwndbg
A GDB plug-in that makes debugging with GDB less painful, with enhanced displays for registers, stack, and heap.
Angr
A powerful Python framework for analyzing binaries, performing symbolic execution, and solving constraints.
Z3 Theorem Prover
An SMT solver by Microsoft Research. Essential for reverse engineering calculations and keygen solving.
Apktool
A tool for reverse engineering 3rd party, closed, binary Android apps. It can decode resources to nearly original form.
Jadx
Dex to Java decompiler. Command line and GUI tools for producing Java source code from Android Dex and APK files.
🔍 Forensics & Incident Response
Volatility
The memory forensics framework. Analyze RAM dumps from Windows, Linux, and macOS systems to recover process lists, network connections, etc.
Wireshark
The world's foremost network protocol analyzer. Lets you inspect data packets interactively from live capture or PCAP files.
NetworkMiner
A passive network forensic analysis tool (NFAT) that extracts files, certificates, and user credentials from PCAPs.
MemProcFS
A tool that mounts physical memory (RAM dumps) as a virtual filesystem, facilitating easy forensic analysis of operating system memory.
OfflineRegistryView
A lightweight utility for Windows that reads offline Registry hives and prints key contents as a standard .reg file.
🖼️ Steganography & Image Analysis
Aperi'Solve
An automated steganography analysis platform. Upload an image to run zsteg, steghide, exiftool, outguess, and view channels instantly.
Stegsolve
A classic Java image analysis tool to view different color bit-planes of an image (extremely useful for hiding scripts).
Zsteg
A command-line tool to detect LSB steganography in PNG and BMP files.
Steghide
A classic steganography tool to hide data in various kinds of image and audio files (JPEG, BMP, WAV, AU).
Exiftool
An absolute standard command-line utility for reading, writing, and editing meta information (EXIF, IPTC, XMP) in files.
🧩 Cryptography & Decoding
CyberChef
The "Cyber Swiss Army Knife". Web app for encryption, decryption, encoding, decoding, data analysis, hashing, and parsing.
Hashcat
The world's fastest and most advanced password/hash recovery utility. Supports CPU and GPU cracking.
John the Ripper
A highly customizable, fast offline password cracker. Automatically detects hash types and supports massive formats list.
RsaCtfTool
Recover RSA private keys from weak public keys or attack RSA ciphertexts using various factorization methods.
Quipqiup
An online cipher solver. Extremely fast at solving simple substitution ciphers and cryptograms.
📚 CTF Playbooks & Reference Lists
Pwntools
A CTF framework and exploit development library written in Python. Perfect for writing rapid exploit scripts.
HackTricks
The ultimate wiki for cybersecurity pentesting. Covers web, network, active directory, cloud, and local privilege escalation.
CTF 101
An educational platform explaining basic CTF categories, concepts, vulnerabilities, and solutions step-by-step.
ASINT Collection (start.me)
A massive Start.me page dashboard featuring links categorized for active and passive OSINT collection.
Oscar Zulu Toolbox (start.me)
A dedicated OSINT collection with lookup links for domains, IP addresses, and locations.