📚

CTF Resources

Curated links to official documentation, free training platforms, hands-on labs, and essential tools — one page per challenge domain.

Quick Reference

🚩
CTF Cheatsheet
Identify unknown encodings & ciphers at a glance, pick the right RSA attack, and jump to the best tool for every category.

Challenge Domains

⚔️
Attack & Defense
Live team-vs-team CTF — guide & tutorial to build a vulnerable service and its environment.
🌐
Web Security
Exploit web apps — XSS, SQLi, SSRF, CORS, OAuth and beyond.
🔐
Cryptography
Break and build ciphers, hash functions, and protocols.
🔬
Reverse Engineering
Disassemble, decompile, and understand compiled binaries.
🔍
Forensics
Recover deleted files, analyse memory dumps, and trace attackers.
💥
Binary Exploitation (Pwn)
Buffer overflows, ROP chains, heap exploits, and shellcode.
🎲
Miscellaneous
Steganography, scripting, encoding puzzles, and more.
👁️
OSINT
Open-source intelligence — find anything using only public data.
☁️
Cloud / DevOps
Misconfigurations in AWS, Azure, GCP, Docker, and Kubernetes.
📱
Mobile
Hack Android and iOS apps — from APK reversing to runtime hooks.
🔧
Hardware / IoT
UART, JTAG, firmware analysis, and embedded device exploitation.