Forensics Copilot
By
@weibolin322
- 5 Devlogs
- 10 Total hours
A command-line assistant for CTF forensics challenges.
Ship #1
Pending review
@weibolin322
on
Forensics Copilot
I made a command-line assistant for CTF forensics challenges. This ship is for v0.1.0. It's a very simple version so it can only do some easy job like checking for trailing data or plain text flag scaning. I will add more feature to it in the furture.
Sorry this release will only work on MacOS with Apple Silicon because it requires magic-lib and I put the version I have into the package. I will make a new release for Linux and Windows soon!
Thank you for trying my project!
@weibolin322
on
Forensics Copilot
3h 24m 55s logged
Devlog 5
Added the readme and finish the package for v0.1.0. This is a very early release so it might not work very well :(
@weibolin322
on
Forensics Copilot
1h 5m 53s logged
@weibolin322
on
Forensics Copilot
1h 4m 35s logged
Devlog 3
I made a PNG file that has some hidden data appended to the end. This is the report my project generated after analyzing the file. It marked the file as suspicious and gave some suggestions for human to dive in.
It could also analize other files, I will make video of all the files later.
@weibolin322
on
Forensics Copilot
2h 13m 54s logged
@weibolin322
on
Forensics Copilot
1h 47m 21s logged
Hello!
I just started my new project, the Forensics Copilot. Forensics is a main type of challenges in CTF Competitions.
But it’s always boring and there are not many people want to do it. So I started this project. This project will help CTF competitors automate the tedious initial screening process for forensic challenges, like identifying real file types (not depends on extensions), catching common steganography/data-hiding tricks, recursively unpacking nested archives, and surfacing a prioritized list of next steps.
For people that don’t know the CTF. “Capture The Flag” (CTF) competitions are not related to running outdoors or playing first-person shooters. Instead, they consist of a set of computer security puzzles (or challenges) involving reverse-engineering, forensics, cryptography, web technologies, and more. When players solve them they get a “flag”, a secret string which can be exchanged for points. The more points a team earns, the higher up it moves in rank.
