cyber-security-resources/crypto/crypto_tools.md

Cryptography Ethical Hacking Tools

The following list includes some of the most popular tools to test crypto implementations.

Name	Description
aespipe	Reads data from stdin and outputs encrypted or decrypted results to stdout.
argon2	The password hash Argon2, winner of PHC.
armor	A simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.
athena-ssl-scanner	a SSL cipher scanner that checks all cipher codes. It can identify about 150 different ciphers.
auto-xor-decryptor	Automatic XOR decryptor tool.
bletchley	A collection of practical application cryptanalysis tools.
brute12	A tool designed for auditing the cryptography container security in PKCS12 format.
bruteforce-luks	Try to find the password of a LUKS encrypted volume.
bruteforce-salted-openssl	Try to find the password of a file that was encrypted with the 'openssl' command.
bruteforce-wallet	Try to find the password of an encrypted Peercoin (or Bitcoin,Litecoin, etc...) wallet file.
check-weak-dh-ssh	Debian OpenSSL weak client Diffie-Hellman Exchange checker.
chrome-decode	Chrome web browser decoder tool that demonstrates recovering passwords.
cipherscan	A very simple way to find out which SSL ciphersuites are supported by a target.
ciphertest	A better SSL cipher checker using gnutls.
ciphr	A CLI tool for encoding, decoding, encryption, decryption, and hashing streams of data.
cisco5crack	Crypt and decrypt the cisco enable 5 passwords.
cisco7crack	Crypt and decrypt the cisco enable 7 passwords.
cloakify	Data Exfiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Evade AV Detection.
codetective	A tool to determine the crypto/encoding algorithm used according to traces of its representation.
cribdrag	An interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys.
crypthook	TCP/UDP symmetric encryption tunnel wrapper.
cryptonark	SSL security checker.
dagon	Advanced Hash Manipulation.
daredevil	A tool to perform (higher-order) correlation power analysis attacks (CPA).
decodify	Tool that can detect and decode encoded strings, recursively.
deen	Generic data encoding/decoding application built with PyQt5.
demiguise	HTA encryption tool for RedTeams.
dislocker	A tool to exploit the hash length extension attack in various hashing algorithms. With FUSE capabilities built in.
ducktoolkit	Encoding Tools for Rubber Ducky.
evilize	Tool to create MD5 colliding binaries.
factordb-pycli	CLI for factordb and Python API Client.
featherduster	An automated, modular cryptanalysis tool.
findmyhash	Crack different types of hashes using free online services
foresight	A tool for predicting the output of random number generators.
gcrypt	Simple file encryption tool written in C++.
gnutls2	A library which provides a secure layer over a reliable transport layer (Version 2)
gtalk-decode	Google Talk decoder tool that demonstrates recovering passwords from accounts.
haiti	A CLI tool to identify the hash type of a given hash.
hash-buster	A python script which scraps online hash crackers to find cleartext of a hash.
hash-extender	A hash length extension attack tool.
hash-identifier	Software to identify the different types of hashes used to encrypt data and especially passwords.
hashcheck	Search for leaked passwords while maintaining a high level of privacy using the k-anonymity method.
hashdb	A block hash toolkit.
hasher	A tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally.
hashfind	A tool to search files for matching password hash types and other interesting data.
hashid	Software to identify the different types of hashes used to encrypt data.
hashpump	A tool to exploit the hash length extension attack in various hashing algorithms.
hcxkeys	Set of tools to generate plainmasterkeys (rainbowtables) and hashes for hashcat and John the Ripper
hdcp-genkey	Generate HDCP source and sink keys from the leaked master key.
hlextend	Pure Python hash length extension module.
httpsscanner	A tool to test the strength of a SSL web server.
hyperion-crypter	A runtime encrypter for 32-bit portable executables.
ja3	Standard for creating SSL client fingerprints in an easy to produce and shareable way.
jeangrey	A tool to perform differential fault analysis attacks (DFA).
kraken	A project to encrypt A5/1 GSM signaling using a Time/Memory Tradeoff Attack.
libbde	A library to access the BitLocker Drive Encryption (BDE) format.
littleblackbox	Penetration testing tool, search in a collection of thousands of private SSL keys extracted from various embedded devices.
luksipc	A tool to convert unencrypted block devices to encrypted LUKS devices in-place.
morxcrack	A cracking tool written in Perl to perform a dictionary-based attack on various hashing algorithm and CMS salted-passwords.
morxkeyfmt	Read a private key from stdin and output formatted data values.
nomorexor	Tool to help guess a files 256 byte XOR key by using frequency analysis
omen	Ordered Markov ENumerator - Password Guesser.
omnihash	Hash files, strings, input streams and network resources in various common algorithms simultaneously.
openstego	A tool implemented in Java for generic steganography, with support for password-based encryption of the data.
outguess	A universal steganographic tool.
pacumen	Packet Acumen - Analyse encrypted network traffic and more (side-channel attacks).
pip3line	The Swiss army knife of byte manipulation.
poracle	A tool for demonstrating padding oracle attacks.
posttester	A jar file that will send POST requests to servers in order to test for the hash collision vulnerability discussed at the Chaos Communication Congress in Berlin.
pwd-hash	A password hashing tool that use the crypt function to generate the hash of a string given on standard input.
pwdlyser	Python-based CLI Password Analyser (Reporting Tool).
pybozocrack	A silly & effective MD5 cracker in Python.
pyssltest	A python multithreaded script to make use of Qualys ssllabs api to test SSL flaws.
rdp-cipher-checker	Enumerate the encryption protocols supported by the server and the cipher strengths supported using native RDP encryption.
rsactftool	RSA tool for ctf - retreive private key from weak public key and/or uncipher data.
rsatool	Tool that can be used to calculate RSA and RSA-CRT parameters.
rshack	Python tool which allows to carry out some attacks on RSA, and offer a few tools to manipulate RSA keys.
rupture	A framework for BREACH and other compression-based crypto attacks.
sandy	An open-source Samsung phone encryption assessment framework
sbd	Netcat-clone, portable, offers strong encryption - features AES-128-CBC + HMAC-SHA1 encryption, program execution (-e), choosing source port, continuous reconnection with delay + more
sha1collisiondetection	Library and command line tool to detect SHA-1 collision in a file
sherlocked	Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
skul	A PoC to bruteforce the Cryptsetup implementation of Linux Unified Key Setup (LUKS).
snapception	Intercept and decrypt all snapchats received over your network.
snow	Steganography program for concealing messages in text files.
spiped	A utility for creating symmetrically encrypted and authenticated pipes between socket addresses.
ssdeep	A program for computing context triggered piecewise hashes
sslcaudit	Utility to perform security audits of SSL/TLS clients.
ssllabs-scan	Command-line client for the SSL Labs APIs
sslmap	A lightweight TLS/SSL cipher suite scanner.
sslscan	A fast tools to scan SSL services, such as HTTPS to determine the ciphers that are supported
tchunt-ng	Reveal encrypted files stored on a filesystem.
testssl	Testing TLS/SSL encryption.
testssl.sh	Testing TLS/SSL encryption
tls-attacker	A Java-based framework for analyzing TLS libraries.
tls-map	CLI & library for mapping TLS cipher algorithm names: IANA, OpenSSL, GnUTLS, NSS.
tls-prober	A tool to fingerprint SSL/TLS servers.
tlsenum	A command line tool to enumerate TLS cipher-suites supported by a server.
tlsfuzzer	SSL and TLS protocol test suite and fuzzer.
tlspretense	SSL/TLS client testing framework
untwister	Seed recovery tool for PRNGs.
veracrypt	Disk encryption with strong security based on TrueCrypt
webfixy	On-the-fly decryption proxy for MikroTik RouterOS WebFig sessions.
x-rsa	Contains a many of attack types in RSA such as Hasted, Common Modulus, Chinese Remainder Theorem.
xorbruteforcer	Script that implements a XOR bruteforcing of a given file, although a specific key can be used too.
xorsearch	Program to search for a given string in an XOR, ROL or ROT encoded binary file.
xortool	A tool to analyze multi-byte xor cipher.
zulucrypt	Front end to cryptsetup and tcplay and it allows easy management of encrypted block devices.