forensics-tools
Digital forensics tools for file carving, steganography detection, PCAP analysis, and entropy scanning in CTF challenges. Trigger: When analyzing files, steganography, PCAP traffic, or hidden data.
- License 许可
- MIT
- 最近更新
- 2026-04-24
- Stars
- ★ 0
- Forks
- 0
01 前言 Front Matter
- name
- forensics-tools
- license
- MIT
- metadata
- { "author": "ctf-arsenal", "version": "1.0", "category": "forensics" }
- description
- Digital forensics tools for file carving, steganography detection, PCAP analysis, and entropy scanning in CTF challenges. Trigger: When analyzing files, steganography, PCAP traffic, or hidden data.
02 资源文件 3
- 参考文档agents/openai.yaml167 B
- 参考文档description_cn.txt169 B
- 参考文档description_en.txt198 B
03 SKILL.md 正文
forensics tools
Use this skill when the task matches the description above. Keep the initial response concise and only open bundled references or scripts when they are clearly needed.
Quick cues
- Analyzing suspicious files or unknown file formats
- Extracting hidden data or carved files
- Detecting steganography in images/audio
- Analyzing network PCAP files
- Scanning for high-entropy (encrypted/compressed) data
- Working with file signatures and magic bytes
file_analysis/binwalk_extract.sh- Wrapper for binwalk extractionsteganography/steg_quickcheck.py- Automated steg detection
Available sections
- Digital Forensics Tools
- When to Use
- File Analysis and Carving
- Binwalk - Extract Embedded Files
- Scan for embedded files
- Extract all found files
- Extract with signature scan
- Scan for specific file types
- Common File Signatures (Magic Bytes)
- Manual File Carving with dd
- Extract bytes from offset to end
- Extract specific byte range
Bundled resources
- description_cn.txt
- description_en.txt
Open these resources only if the current task needs deeper detail or executable helpers.
04 同仓库更多 Skills
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
web-artifacts-builder
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
theme-factory
Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly.
slack-gif-creator
Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like "make me a GIF of X doing Y for Slack.
skill-creator
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
reverse-engineering-android-malware-with-jadx
Reverse engineers malicious Android APK files using JADX decompiler to analyze Java/Kotlin source code, identify malicious functionality including data theft, C2 communication, privilege escalation, and overlay attacks. Examines manifest permissions, receivers, services, and native libraries. Activates for requests involving Android malware analysis, APK reverse engineering, mobile malware investigation, or Android threat analysis. '