The Toolbox

HTTP proxy, scanner, repeater. The first tool open on every web challenge.

Decode and inspect JWTs instantly. Essential for any web challenge with auth.

One-click reverse shell payloads in every language. Saves time every single time.

NSA's free reverse engineering tool. Handles Go binaries better than IDA for free.

Python CTF framework for exploit development. Makes ROP chains feel like cooking.

Packet capture and analysis. Good for network forensics and traffic-based challs.

Self-hosted DNS logger for OOB exfiltration. Required for blind SSRF / RCE.

Encode, decode, encrypt, analyse. The Swiss Army knife. Always open.

Unix binaries for privilege escalation. Bookmarked before my first CTF.

The payload reference. Covers everything from SQLi to SSRF to race conditions.