General Tips

General CTF Resources

• CyberChef: General operations.
• dencode: Multiple Encoding/Decoding algorithms.
• revshells: Easily get code for reverse shell with different options for platforms and languages to choose from.
• Practical CTF: Explanation and example scripts for common CTF challenges.
• Cyber Training Guide: CTF writeups grouped by category that can help if you know what kind of problem you're facing.
• CTF Cheat Sheet: Common commands, tools, and techniques for CTF challenges grouped by category.
• Common CTF Challenges Resources: Contains list of helpful tools for CTF challenges based on category.

Web Resources:

• CSRF Generator: Paste the request copied from Burpsuite repeater and paste it to generate HTML code for CSRF exploit.
• GraphQL Visualizer: Visualizes relationships in GraphQL schema by pasting result from introspection query.
• PayloadsAllTheThings: Web payloads for different vulnerabilities (SQLi/NoSQLi, CSRF, XSS, Command injection, SSRF, ...).
• PayloadBox: More payloads.
• Jinja Payloads: Payloads to bypass filters and get remote code execution on websites using Jinja templating engine.

Crypto Resources:

• dcode: Decrypter for different algorithms.
• RsaCtfTool: Tool to break weak RSA encryption.
• Keyed Caesar Cipher: Caesar cipher with key decryption tool.

OSINT Resources:

• OSINT Framework: Groups of OSINT tools based on use-case.

Useful Commands

Recursively Search For A Word In A Directory's Files

grep -r <word-to-find> <path-of-directory-to-search>

Recursively Search For A File In A Directory By Case Insensitive Name

sudo find <path-of-directory-to-search> -type f -iname <name-of-file-to-find> 2>/dev/null

Recursively Search For A Directory In A Directory By Case Insensitive Name

sudo find <path-of-directory-to-search> -type f -iname <name-of-directory-to-find> 2>/dev/null

Check Web Page's Source Code

Check /robots.txt File

Send A TRACE request To Endpoints For Information Disclosure

Check For A .git Directory