A list of information security tools I use to complete CTFs and other cybersecurity tasks. I will update this as I reference tools on my site.
Also worth checking out is sbilly’s Awesome Security list.
Last updated on 08/23/25.
Table of Contents
OSINT / Reconnaissance
- nmap - network scanning and host discovery tool
- GoBuster - discover hidden URLs, files, and directories within websites
- This helps to remove/secure hidden files and sensitive data & securing sub-domains and virtual hosts from being exposed to the internet.
Blue Team
Data / File Analysis
- CyberChef - encoding, decoding, compression, decompression, parsing, and analyzing data or files
- steghide - steganography program, hide and reveal info in photos
OS / Programming
Linux
- bash - Bourne Again Shell; shell (way to send commands to the operating system) for most Linux installations