ctf-crypto

ctf-rev guides you through reverse engineering CTF challenges using structured methodologies for program comprehension. Learn to identify critical code paths, trace input transformations, recognize standard algorithms, and extract hidden flags through static analysis, dynamic observation, or hybrid approaches tailored to each challenge type.

Deep Analysis conducts focused, evidence-based investigation of specific binary questions—such as function purpose, cryptographic usage, or network indicators—through iterative analysis loops. Unlike breadth-first surveys, it follows investigation threads completely, making incremental improvements to variable names, types, and comments within the Ghidra database to enhance code clarity. Use it after initial triage to drill into suspicious areas or answer targeted questions about binary behavior.

ctf-crypto is a reference guide for cryptographic attack methods in CTF competitions, covering classical and modern cipher exploits, RSA and ECC vulnerabilities, lattice-based attacks, PRNG state recovery, and zero-knowledge proof breaks. It includes practical one-liners and supporting documentation for techniques like padding oracles, key derivation weaknesses, and Coppersmith attacks, with setup instructions for Python packages and external tools.

Binary Triage performs an initial survey of unknown programs to rapidly assess what they do and surface red flags. It systematically examines memory layout, extracts and analyzes strings, catalogs imports and functions, then cross-references findings to prioritize deeper investigation. Use this when you need a fast overview before diving into detailed reverse engineering.

Identify and solve classical ciphers encountered in CTF challenges through systematic analysis. The skill covers cipher identification via character set, frequency distribution, and index of coincidence, then applies targeted attacks for monoalphabetic substitution, Caesar/ROT variants, polyalphabetic ciphers like Vigenere, and transposition methods. Includes Kasiski examination for key-length recovery and known-plaintext techniques.

Crypto-analysis evaluates cryptographic posture across TLS/SSL/SSH configurations, public-key implementations, and token schemes. It detects cipher downgrades, weak key generation, nonce reuse, AEAD misuse, and JWT algorithm confusion using integrated tools like testssl.sh, openssl, and hashcat. Use it to identify cryptographic flaws before attackers do.