ROPgadget
CyberChef
| ROPgadget | CyberChef | |
|---|---|---|
| 2 | 286 | |
| 3,723 | 25,649 | |
| - | 2.5% | |
| 4.6 | 9.3 | |
| 8 months ago | 4 days ago | |
| Python | JavaScript | |
| GNU General Public License v3.0 or later | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ROPgadget
-
Buffer overflows in CTFs
It may also include lines to find what is called "ROP gadgets" and libraries such as gdb to determine the offset for the buffer overflow.
-
Awesome CTF : Top Learning Resource Labs
ROP Gadget - Framework for ROP exploitation.
CyberChef
-
PicoCTF 2024: packer
Then we take the encrypted text and use CyberChef to decrypt it.
-
Unbreakable 2024: secrets-of-winter
Let's go to CyberChef and insert our pieces of evidence.
-
YouTube: Google has found a way to break Invidious
A parameter was changed from '2AMBCgIQBg' to 'CgIIAdgDAQ%3D%3D' which is just the correct base64 encoding they should have been using the entire time.
I don't think this was a hostile action by Google, I think someone just added better input validation for security reasons and it accidently broke the bad requests they were sending.
https://gchq.github.io/CyberChef/#recipe=URL_Decode()From_Ba...
-
PicoCTF 2024- CanYouSee
❗This is indeed the flag, but the text is encrypted with Base64. Usually, the presence of padding character "=" indicates that's Base64 type of encoding (but that's only one of the hints). To decrypt it, we can use CyberChef. Copy-paste the text and we either:
-
CyberChef VS DevToolboxWeb - a user suggested alternative
2 projects | 6 Feb 2024
-
CyberChef from GCHQ: The Cyber Swiss Army Knife
It uses a combination of magic bytes (like the `file` command), entropy analysis and character frequency detection to determine whether an output is likely to be of interest to the user.
The file type mechanism is written here[0]. There's a list of all signatures we detect here[1].
[0] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F...
- Show HN: File Hider
- UK GCHQ's CyberChef
-
Lets try this again. Got a code for you to break.
I think this can be deciphered using CyberChef...
- CyberChef is a useful tool for decoding information.
What are some alternatives?
write-ups
QR-Code-generator - High-quality QR Code generator library in Java, TypeScript/JavaScript, Python, Rust, C++, C.
falcon-tools - Some tools and exploits for the NVIDIA Falcon v5 TSEC engines
CapRover - Scalable PaaS (automated Docker+nginx) - aka Heroku on Steroids
rp - rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.
py4e - Web site for www.py4e.com and source to the Python 3.0 textbook
beambreak - Boosted Board Reverse Engineering Project
cyberchef-recipes - A list of cyber-chef recipes and curated links
Metasploit - Metasploit Framework
Ciphey - ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
Monica - Personal CRM. Remember everything about your friends, family and business relationships.
binwalk - Firmware Analysis Tool [Moved to: https://github.com/ReFirmLabs/binwalk]