CTF Toolkit & Resources

Environment Integration: Kali Linux

*Note: A local deployment of Kali Linux is not strictly required to complete the challenges, but it can provide a highly optimal workspace layout for advanced tracks.

  • VirtualBox Setup Guide — Step-by-step configurations for installing a pre-built Kali Guest image into an x86 VirtualBox sandbox.
  • UTM Deployment for macOS — Configuration guide tailored for building virtual environments utilizing Apple Silicon architectures.
  • VMware Fusion Deployment for macOS — Configuration guide tailored for building virtual environments utilizing Apple Silicon architectures.
  • Kali inside Containerized Engine (Docker) — Guide exploring how to initialize a streamlined, isolated instance of security testing components inside a fast, lightweight Docker footprint.
  • Kali Image Mirrors - Kali mirror locations (if inaccessible via kali.org) https://kali.download/base-images/; https://mirrors.ocf.berkeley.edu/kali-images/; https://us.mirror.ionos.com/linux/distributions/kali/kali-images/

Environmental integration extras:

  • Docker Desktop (Application Installation): A GUI-based tool designed to easily build, share, and run containerized applications and microservices locally across different operating systems.
  • Pipenv (Command-line Tool): A Python packaging tool that automatically creates and manages a virtualenv for your projects, seamlessly combining pip and virtualenv into a single workflow.

Open Source Intelligence (OSINT)

  • Reverse Image Search: Useful for trailing down image sources or tracking locations. You can utilize platforms like Google Image Search, TinEye, Yandex, or Bing Visual Search.
  • Wayback Machine (Web Application): A digital archive of the World Wide Web that allows users to capture, find, and analyze historical versions of web pages across time.

Forensics

  • Wireshark (Application Installation): An essential network protocol analyzer tool designed to help parse through network packet captures (.pcap / .pcapng) of different communication layers.
  • Volatility 3 (Program Installation): An advanced framework designed to help extract metadata and parse through raw memory dumps from compromised target environments.
  • Binwalk (Command-line Tool): A powerful tool designed for analyzing, reverse engineering, and extracting embedded files and executable code from binary images.
  • AperiSolve (Web Application): An all-in-one online platform used for steganography analysis, capable of automatically testing images against various layer, password, and extraction tools.
  • Audacity (Application Installation): A free, open-source digital audio editor and recording application used to analyze waveforms, isolate frequencies, and extract hidden audio data.

Cryptography

  • CyberChef (Browser-Based): A highly versatile web tool featuring a modular "recipe" assembly line system that lets you handle complex encodings, mathematical transformations, data encryptions, and decryption pipelines seamlessly.
  • dcode.fr (Browser-Based): A fantastic reference catalog and suite of online tools ideal for quick decryption ideas, cipher analysis, and modular puzzles.

Web Exploitation

  • Chrome / Firefox Developer Tools: A powerful native mechanism inside your web browser to dynamically inspect DOM structures, analyze live page source layers, tweak javascript configurations, and audit HTTP request/response sequences via the Network tab.
  • Burp Suite: A comprehensive security testing platform allowing you to intercept, dissect, modify, and repeat web application proxy traffic directly at the HTTP layer.
  • OWASP Top 10: The widely recognized framework mapping the top 10 standard critical security flaws and trends impacting enterprise web applications.

Reverse Engineering & Binary Exploitation

  • Command Line Tools:
    • strings — Extracts and outputs human-legible plaintext strings located within an executable block.
    • ltrace — A dynamic tracer utility that listens to library actions and runtime parameters during file execution.
  • Ghidra (Installation Required): A comprehensive, high-tier software reverse engineering framework perfect for disassembling, tracking code control flow, and debugging machine code.
  • Gdb: The classic command-line GNU Project Debugger designed to let you see inside alternative compilation tracks, set breakpoints, and track dynamic memory execution.