Repository files navigation

This is a collection of setup scripts to create an install of various security research tools.Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth.The install-scripts for these tools are checked regularly, the results can be found onthe build status page.

Installers for the following tools are included:

There are also a couple of installers for useful libraries included. Currentlyonly the python bindings for these libraries are installed.

There are also some installers for non-CTF stuff to break the monotony!

To use, do:

# set up the path/path/to/ctf-tools/bin/manage-tools setupsource~/.bashrc# list the available toolsmanage-tools list# install gdb, allowing it to try to sudo install dependenciesmanage-tools -s install gdb# install pwntools, but don't let it sudo install dependenciesmanage-tools install pwntools# uninstall gdbmanage-tools uninstall gdb# uninstall all toolsmanage-tools uninstall all# search for a toolmanage-tools search preload

Where possible, the tools keep the installs very self-contained (i.e., in to tool/ directory), and most uninstalls are just calls togit clean (NOTE, this isNOT careful; everything under the tool directory, including whatever you were working on, is blown away during an uninstall).One exception to this are python tools, which are installed using thepippackage manager if possible. Actftools virtualenv is created during themanage-tools setup command and can be accessed using the commandworkon ctftools.

Something not working?I didn't write (almost) any of these tools, but hit up#ctf-tools on freenode if you're desperate.Maybe some kind soul will help!

By popular demand, a Dockerfile has been included.You can build a docker image with:

git clone https://github.com/zardus/ctf-toolsdocker build -t ctf-tools.

And run it with:

docker run -it ctf-tools

The built image will have ctf-tools cloned and ready to go, but you will still need to install the tools themselves (see above).

Alternatively, you can also pull ctf-tools (with some tools preinstalled) from dockerhub:

docker run -it zardus/ctf-tools

You can build a Vagrant VM with:

wget https://raw.githubusercontent.com/zardus/ctf-tools/master/Vagrantfilevagrant up

And connect to it via:

vagrant ssh

Kali Linux (Sana and Rolling), due to manually setting certain libraries to not use the latest version available (sometimes being out of date by years) causes some tools to not install at all, or fail in strange ways. AFL and Panda comes to mind, in fact any tool that uses QEMU 2.30 will probably fail during compilation under Kali.Overriding these libraries breaks other tools included in Kali so your only solution is to either live with some of Kali's tools being broken, or running another distribution seperately such as Ubuntu.

Most tools aren't affected though.

To add a tool (say, namedtoolname), do the following:

1. Create atoolname directory.
2. Create aninstall script.
3. (optional) if special uninstall steps are required, create anuninstall script.

The install script will be run with$PWD beingtoolname. It should install the tool into this directory, in as contained a manner as possible.Ideally, full uninstallation should be possible with agit clean.

The install script should create abin directory and put its executables there.These executables will be automatically linked into the mainbin directory for the repo.They could be launched from any directory, so don't make assumptions about the location of$0!

The individual tools are all licensed under their own licenses.As for ctf-tools itself, it is "starware".If you find it useful, star it on github (https://github.com/zardus/ctf-tools).

Good luck!

There's a curated list of CTF tools, but without installers, here:https://github.com/apsdehal/aWEsoMe-cTf.

There's a Vagrant config with a lot of the bigger frameworks here:https://github.com/thebarbershopper/epictreasure.

These tools are present in the Debian or Ubuntu repos (in an adequately new version).They're not included in ctf-tools, but are included here as notes for the author.