bcarmaciu/ctf-toolkit repository overview

⁠CTF Toolkit

A minimal collection of CTF-focused tools packaged in a portable Docker container.

Designed for password cracking, enumeration, scripting challenges, audio analysis, and general utility work.

⁠Included Tooling

⁠1. Password Cracking & Hash Analysis

• HashID – Identify hash formats
• Hashcat – Password and hash cracking engine

⁠2. Wordlists & Payloads (SecLists)

Includes:

• Password lists
• Fuzzing payloads
• Discovery wordlists
• OSINT datasets
• Web attack patterns

Location inside container:

/opt/seclists

⁠3. Python 3 + pip

Suitable for:

• Quick exploit scripts
• Encoding and decoding tasks
• Cryptography challenges
• Automation
• API interaction

⁠4. Networking & Enumeration

• curl – HTTP requests, API testing, web enumeration
• wget – File retrieval and mirroring
• hydra – Fast online password brute-forcing (SSH, FTP, HTTP, etc.)

⁠5. Audio Analysis (SoX)

• Spectrogram generation
• Audio manipulation
• Format conversion
• Channel isolation

⁠6. General Utilities

• git – Clone repositories, pull challenge code
• unzip – Extract challenge archives

⁠Usage

The container starts in /data.

Mount your working directory into /data when launching the container.

⁠Linux / macOS Shells

docker run -it --rm -v "$PWD:/data" bcarmaciu/ctf-toolkit:<version>

⁠PowerShell / Windows Shells

docker run -it --rm -v "${PWD}:/data" bcarmaciu/ctf-toolkit:<version>

Replace <version> with the appropriate image tag.