Everything the team reaches for — CTF, red team, blue team, OSINT, forensics, wireless and living-off-the-land, plus the one-liners we retype every engagement. Search, filter by tag, and click any code block to copy it.
Heuristic identifier that suggests which classical cipher or encoding a piece of ciphertext most likely came from, based on its character set and statistical shape.
Automated decoding tool that tries to work out what encoding or cipher was used on a blob of text (base64, ROT13, Vigenère, hashes, and combinations of them) without being told.
ciphey -t "encrypted text"
Browser-based pipeline editor for chaining encodings and classical ciphers (base64, Caesar, Morse, binary, and more) to decode a multi-layered CTF puzzle step by step.
Visual, drag-and-drop workbench for building cryptanalysis pipelines — includes ready-made attacks on historical ciphers (Enigma, Vigenère, classical substitution) alongside modern crypto demos.
GCHQ's "Cyber Swiss Army Knife" — a browser-based drag-and-drop pipeline for encoding, decoding, encryption and data-format transforms, arguably the single most-used CTF crypto/forensics tool there is.
Enormous library of online solvers and identifiers for classical ciphers, encodings and CTF-favourite puzzle formats — often the fastest way to identify what you are even looking at.
Fast CLI/library for exploiting CBC padding oracles, decrypting or forging ciphertext by repeatedly resubmitting modified blocks and reading the oracle's pad-valid/invalid signal.
padding-oracle-attacker decrypt -u https://target/decrypt --data "$CT" --error-string "invalid padding"
Automatic solver for monoalphabetic substitution ciphers and cryptograms, using letter frequency and dictionary matching to recover plaintext without a known key.
Recovers a repeating XOR key by XOR-ing ciphertext against a guessed plaintext fragment (a crib like "flag{"), a fast manual technique when the key is shorter than or equal to the crib.
python3 -c "
ct = bytes.fromhex('...')
crib = b'flag{'
print(bytes(c ^ k for c, k in zip(ct, crib)))
"
Guesses the key length of a repeating-key XOR ciphertext from character-frequency analysis, then recovers the most likely key.
xortool ciphertext.bin -l 4