CTF & Security Resources

Think we're missing a great resource? Suggest resources to add with this form!

Binary Exploitation

• Wargames (Practice)
• Pwnable.kr - Always-on binary exploitation focused CTF
• Learning Resources
• pwn.college - A course to teach beginners about binary exploitation
• RPISEC's Modern Binary Exploitation - A university course developed and run solely by students to teach skills in vulnerability research, reverse engineering, and binary exploitation
• shellphish's how2heap - A repository for learning various heap exploitation techniques

Cryptography

• Wargames (Practice)
• CryptoHack - Always-on cryptography focused CTF
• Cryptopals - Collection of cryptography puzzles
• Tools
• CyberChef - A powerful tool that has encoders/decoders for all sorts of encodings and cryptosystems

Forensics

• Learning Resources
• Trail of Bits' Forensics Guide - A guide that describes common problems you'll see in the forensics category

Linux

• Wargames (Practice)
• OverTheWire - A collection of games that teach you how to use certain Linux commands and tools
• Learning Resources
• Linux Journey - Lessons that teach you about different aspects of Linux

Networking

• Learning Resourcces
• A Cat Explains... - A series of videos where a cat explains different networking (and other security related) topics
• Professor Messer - Videos and notes about networking topics
• Tools
• Nessus - A network vulnerability scanner
• Wireshark - A powerful tool that allows you to inspect, filter, analyze and capture networking traffic

Penetration Testing

• Wargames (Practice)
• Hack The Box - Machines with vulnerabilities built in that you can practice exploiting
• VulnHub -
• Learning Resources
• INE - eJPT Course
• IppSec - YouTuber who walks through Hack The Box solutions
• Practical Ethical Hacking
• TryHackMe
• Tools
• Kali Linux - Linux distribution built for penetration testing

Reverse Engineering

• Wargames (Practice)
• MicroCorruption - Embedded security reversing wargame
• Tools
• Ghidra - Free reverse engineering tool (decompiler, etc.) created by the NSA

Web

• Wargames (Practice)
• Damn Vulnerable Web App - Purposefully vulnerable web application to practice exploitation on
• OWASP Juice Shop - Another purposefully vulnerable web app
• Learning Resources
• Vulnweb - collection of vulnerable test websites
• Tools
• BurpSuite