CTF Links

List of practice sites for CTF challenges I got this list from my study, but have increased/modified/altered for my purposes

• bWAP

  • A buggy web app, like Juice shop

• Cryptopals

  • Cryptographic programming challenges

  • I like the look of this one, the humour isnt bad either (and I think I can do 9th grader maths…)

• CTF365

  • This one is interesting, probably my next step. You build a server in a virtual internet, where anything is permitted.

  • Looks like a GREAT way to work on blue teaming and red.

• CTFlearn

  • Looks like general ctf practice. You need an account though

• CTFTime

  • A running dashboard of ongoing/planned CTFs

• Game of Hacks

  • Focused around application pen testing (actual code, not web apps)

• Google Gruyere

  • Vulnerable web app, stored online

  • It specifies what level of attack is needed (black box, white-check code, mix)

• Google XSS Game

  • Cross-site scripting for beginners

• Hack.me
  

  • Looks to be removed, provided by eLearnSecurity

  • Maybe turned to THM?

• Hacking-Lab
  

  • CTFs, event based.

• HackTheBox (HTB)

  • A collection of rooms with many challenges.

• IO
  

  • Looks to be an application / assembly wargame.

• Juice shop

  • Vulnerable web app

  • Provided by OWASP, web pen testing

• Microcorruption

  • ARM disassembling

  • Includes a tutorial… And a nice storyline.

  • My assembly is a bit rusty. Something for later I think

• Over The Wire wargames

  • Pure SSH hacking

• OWASP WebGoat 1.2

  • Insecure java application.

• picoCTF

  • CTF by Carnegie Mellon Uni

  • Includes learning, competitions, CTF etc

• Portswigger’s Web Security Academy

  • Web security training from the guys who made burpsuite

• pwn0

  • looks to be taken down

• pwnable.kr

  • A very casual (and korean?) CTF

  • Includes some basic videos

• pwnable.tw

  • More CTF/wargame but more binary based

  • Looks to have not been updated in a while (start 2020)

• Reversing.kr

  • Odly enough, reverse engineering.

  • Windows, linux, .NET, Flash, Java, Python

  • As you can probably guess with the mention of Flash, hasnt been updated since End 2014

• RingZer0 Team Online CTF

  • Hosted by Northsec?

  • CTF challengs, including a RCEH? (RingZer0 Certified Elite Hacker)

  • Most of us use the E as ETHICAL hacker, so not sure about the lelgitimacy of this one…

• Root Me

  • Community run CTF

  • Includes a paid tier

• SmashTheStack

  • A wargaming network (joined ith OverTheWIre and IO above)

  • Wargames are challenges to complete

• Typhoon vulnerable VM

  • DENIED

• XSS Challenge Wiki

---