Welcome to Mark's blog for Capture The Flag (CTF) enthusiasts

Friday, May 6, 2022

10 Essential CTF tools

Some CTFs are tricky. The right tool can really help. Here are 10 tools that run entirely in your web browser.

For newbies
These tools are simple yet powerful.

1. CyberChef (https://gchq.github.io/CyberChef/). Mix and match lots of fun encryption methods.

2. dCode cipher identifier (https://www.dcode.fr/cipher-identifier). This AI tool guesses possible ways to decode secret messages.

3. Scantrics URL Fuzzer (https://scantrics.io/url-fuzzer/). Finds hidden webpages.

4. Online Screenshot OCR (http://www.structurise.com/screenshot-ocr/). Extracts text in pictures, so you can focus on finding flags.


For experts.
You'll need a little practice to use these tools well.

1. Google Advanced Search (https://www.google.com/advanced_search). Gives you more precise results than normal searches. Find your flags fast.

2. Online Python compiler. (https://www.programiz.com/python-programming/online-compiler/). Play with python code and find your flags. 

3. Browser Developer Tools (depends on your browser, shift-ctrl-I for Chrome). Discover hidden data in HTML, and run JavaScript code too.  


For CTF masters.
These tools can be part of a longer sequence. Use them with the others mentioned here to solve complex puzzles.

1. Online Strings tool (https://www.fileformat.info/tool/strings.htm). Detects invisible information in files.

2. StegOnline (https://stegonline.georgeom.net/upload). Find hidden data in images.

3. Regex101 (https://regex101.com/). Searches large amounts of text based on flexible patterns.

Try these cool tools with our 30 minute CTF game here