Web Exploitation
Explore SQL injection, XSS, SSRF, deserialization, and other web vulnerabilities dissected from real CTF challenges.
Cryptography
Break weak ciphers, exploit RSA implementation flaws, and learn the math behind modern cryptographic attacks.
Binary Exploitation
Master buffer overflows, ROP chains, heap exploitation, and format string vulnerabilities with hands-on walkthroughs.
Forensics
Recover hidden data from memory dumps, network captures, disk images, and steganographic files.
Miscellaneous
Tackle OSINT puzzles, jail escapes, scripting challenges, and everything else that defies a single category.
Setup Guide
Configure your local hacking environment with the tools, VMs, and scripts used throughout these writeups.
Getting Started
New to CTFs or to this site? Follow these four steps to go from zero to solving challenges with confidence.1
Set Up Your Environment
Head to the Setup Guide to install essential tools like GDB, pwntools, Burp Suite, and Wireshark. A properly configured environment saves you hours of troubleshooting mid-challenge.
2
Pick a Category
Browse the category overviews above and choose the area that matches your current skill level or curiosity. Each overview page lists challenges from easiest to hardest so you always know where to start.
3
Follow the Writeup
Work through the challenge alongside the writeup. Read the reconnaissance section first, attempt the exploitation step yourself, and only check the solution when you’re genuinely stuck. Active struggle accelerates learning far faster than passive reading.
4
Practice the Techniques
After finishing a writeup, search for similar challenges on platforms like PicoCTF, HackTheBox, or CTFtime. Repeating the same technique in a slightly different context is the fastest path to truly owning it.