Tools

• base64:

  base64 -d base64file > output
  

• bless: hex editor for linux: sudo apt-get install bless
• cryptool
• dumpasn1
• exiftool/
• radare
• TrID
• xortool

fcrackzip

Example:

fcrackzip -u -l 1-6 -c 'a1' my.zip

Radare 2

See: Usage examples and Cheat Sheet

Commands

aa	analyze all
px	print hexadecimal
pd 	print disassembled
pdf @main      disassemble main function
pdf @sym.main
p?	help on print
V	visual mode
/i string      search for a string
afl	       list functions
s section..comment  go to the section .comment
s 0xabc		    go to the address 0x0abc

Visual mode

To cycle through visual modes: p.

Rabin2

Alternative to strings:

rabin2 -z

Get information such as is it stripped or not:

rabin2 -l

radiff

Difference between two executables:

radiff2 -C bin1 bin2

Books, docs

• C.Eagle, The IDA Pro Book

Challenges I wrote

See this page

Write ups

CTF write up archive