Capture The Flag competitions and challenges are the fun part of being a hacker. There is nothing quite like compromising a box and getting your name on a scoreboard. They are also a fantastic way to hone offensive and defensive skills in a legal environment.
- Introduction · CTF Field Guide - TrailofBits Guide. Fantastic for CTF exploit development
- Tools and Resources to Prepare for a Hacker CTF Competition or Challenge
- Shiva108's CTF Notes
- CTF Resources - This repository aims to be an archive of information, tools, and references regarding CTF competitions.
- Rawsec Inventory - Guides, tools, and challenge writeups.
- home - 0xRick - Detailed challenge writeups.
- Bishop Fox Pocket CTF Guide - https://know.bishopfox.com/hubfs/mkt-coll/Bishop-Fox-Breaking-and-Entering-Pocket-Guide.pdf
- https://bitsdeep.com/posts/attacking-rsa-for-fun-and-ctf-points-part-1/
- https://cheatsheet.haax.fr/cryptography/rsa/
- Awesome Lists Collection: CTF Cheatsheets
- AnarchoTechNYC - Hacking club's CTF resources
- ctf tools - This is a collection of setup scripts to create an install of various security research tool that are super valuable in CTF settings
- CTF.Party - A Ruby CLI tool & library to enhance and speed up script/exploit writing for CTF players.
- pwntools - Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible.
- RsaCtfTool - RSA attack tool for CTFs; retrieves private keys from weak public keys and decrypts data.
- ShellPop - Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests.
- Karkinos - Karkinos is a light-weight 'Swiss Army Knife' for penetration testing and/or hacking CTF's. Currently, Karkinos offers the following:
- Encoding/Decoding characters
- Encrypting/Decrypting text or files
- Reverse shell handling
- Cracking and generating hashes
- pyWhat - Command-line tool to identify files, hashes, tokens, and other strings.
- xortool
- unxor
- CTF Time Calendar - Schedule of most of the major Cyber CTF events that are held throughout the year.
- NSA Codebreaker Challenge - Super fun NSA CTF.
- TryHackMe | 25 Days of Cyber - Seasonal holiday CTF.
- Metasploit community CTF 2020 - Historical event announcement.
- Holiday Hack Challenge - SANS Christmas themed hack challenges. Super fun.
- SANS Netwars - SANS CTF that happens along with each of their in person courses. There is an offensive and defensive version.
- MetaCTF - Platform for hosting your own CTFs and joining public events.
- Hack The Box - Virtual machines and challenges that you can access through a VPN.
- CyberSecLabs - Great platform with free and premium CTF challenges. Some are set up as labs with helpful video walk-throughs
- https://pwnable.kr/ - 'pwnable.kr' is a non-commercial wargame site which provides various pwn challenges regarding system exploitation.
- Embedded Security CTF - Grab a debugger and solve fun CTF challenges focused around the code of embedded devices.
- Underthewire - Powershell focused CTF challenges
- Commandline Challenge - CTF-style puzzles focused on CLI skills.
- Root-Me - Complete and create cyber CTF challenges with tons of learning resources.
- www.try2hack.nl - Classic iterative cyber puzzle
- hackthissite.org/ - HackThisSite.org is a free, safe and legal training ground for hackers to test and expand their ethical hacking skills with challenges, CTFs, and more.
- OverTheWire: Wargames - The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games.
- picoCTF - Aimed for highschool students, this is a super easy and fun way to get into cyber ctfs.
- hackxor - Hackxor is a realistic web application hacking game, designed to help players of all abilities develop their skills
- Cyber Warfare Range - The Cyber Warfare Range is a live-fire cyber warfare range created to rapidly train/upskill cybersecurity talent with hands-on learning.
- ctf365 - Defend your servers, and launch attacks on others, all using the exact same techniques that work in the real world.
- TryHackMe | Learn Cybersecurity - Tryhackme is one of the best places to learn cyber. It has tons of free content set up in small bite sized modules to teach and train on specific cyber topics. Also has a big scoreboard for bragging rights.
- Home | Hacker101 - Great platform with tons of free tutorial videos and CTF challenges to practices your skills on.
- Web Security Academy: Free Online Training from PortSwigger - Replacing the Web application Hackers Handbook, PortSwigger Academy teaches you everything you need to know about web app pentesting and has hands on labs for each learning module.
- Pentester Academy - High quality learning courses and CTF style labs
- PentesterLab: Learn practical penetration testing techniques with hands on CTF style labs
- Virtual Hacking Labs - Full offensive course with multiple real world vulnerability labs to practice your skills
- Hack The Box Academy - Training modules for penetration testing and defensive skills.
- Immersive Labs - Platform with offensive and defensive challenges.
- CTFlearn - Beginner-friendly CTF challenge community.