zsteg
apk2gold
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
zsteg
-
Do you think there’s something hidden in this pic?
Yeah, and it's open source.
-
Yesterday afternoon a new account shared this image in Alex Bale's fan Discord. Can you help me analyze? I've been trying for a minute.
zsteg didn't find anything. reddit strips any exif. Didn't see any weird strings.
-
CTF Writeup: picoCTF 2022 Forensics
I decided to use zsteg instead, with the -a option to try all known methods, and the -v option to run verbosely,
-
Awesome CTF : Top Learning Resource Labs
Zsteg - PNG/BMP analysis.
apk2gold
-
Awesome CTF : Top Learning Resource Labs
Apk2Gold - Yet another Android decompiler.
What are some alternatives?
gef - GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
backdoor-apk - backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
UglifyJS2 - JavaScript parser / mangler / compressor / beautifier toolkit
jadx - Dex to Java decompiler
hashcat - World's fastest and most advanced password recovery utility
enjarify
CyberChef - The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Apktool - A tool for reverse engineering Android apk files
pwntools - CTF framework and exploit development library
android-classyshark - Android and Java bytecode viewer
masscan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
dexterity - Dex manipulation library