Capture the Flag (CTF) is a special kind of information security competitions. There are three common types of CTFs: Jeopardy, Attack-Defence and mixed.

Best OS for CTF Challenges for a beginner Hey, just wanted to know what OS would be the best to start out with for CTF challenges. I am familiar with linux, mac and windows but am planning on setting up a VM and download all the necessary tools.

Jeopardy-style CTFs has a couple of questions (tasks) in range of categories. For example, Web, Forensic, Crypto, Binary or something else. Team can gain some points for every solved task. More points for more complicated tasks usually. The next task in chain can be opened only after some team solve previous task. Then the game time is over sum of points shows you a CTF winer. Famous example of such CTF is Defcon CTF quals.

Well, attack-defence is another interesting kind of competitions. Here every team has own network(or only one host) with vulnarable services. Your team has time for patching your services and developing exploits usually. So, then organizers connects participants of competition and the wargame starts! You should protect own services for defence points and hack opponents for attack points. Historically this is a first type of CTFs, everybody knows about DEF CON CTF - something like a World Cup of all other competitions.

Mixed competitions may vary possible formats. It may be something like wargame with special time for task-based elements (e.g. UCSB iCTF).

CTF games often touch on many other aspects of information security: cryptography, stego, binary analysis, reverse engeneering, mobile security and others. Good teams generally have strong skills and experience in all these issues.

edholabs – Sept. 12, 2015, 3:50 p.m.

enda

ctftool – Oct. 29, 2015, 12:11 p.m.

Usually, flag is some string of random data or text in some format. Example flag{congr4tz_y0u_found_1t}

DasMeDevon – Nov. 4, 2015, 2:15 a.m.

Seen some other formats lately, any chance we can get definitions posted here on them?

abdilahrf – April 24, 2016, 5:15 a.m.

Always online Capture The Flag http://ctfs.me/

De 10 bsta flic for mac. Flic For Mac. We’re proud to release the Flic App for Mac. It’s quite simple: we give you extra buttons for your Mac. Good’ol favorite buttons, but for your desk. Hi, Today we are trying something new. We have since the very first release of Flic received a lot of requests from you about using Flic on other devices than their smartphones. While we have had a beta version of a Linux SDK up for a while, Mac support i.

Anxel – April 1, 2017, 6:58 a.m.

7A3B00
6000C7
67C700
42FFFC
C70002
0003C7
007A78
someone help i know nothing

Sign in to comment.

Recommended

• pwnable.kr
• picoctf.com
• microcorruption.com/login
• reversing.kr
• hax.tor.hu
• w3challs.com
• pwn0.com
• smashthestack.org
• ringzer0team.com
• hellboundhackers.org
• overthewire.org/wargames
• counterhack.net/Counter_Hack/Challenges.html
• hackthissite.org
• vulnhub.com
• ctftime.org
• dareyourmind.net

Others

• hackthecause.info
• bright-shadows.net
• mod-x.co.uk/main.php
• scanme.nmap.org
• hackertest.net
• net-force.nl
• securityoverride.org

Meta

• wechall.net/sites.php
• ctf.forgottensec.com/wiki
• repo.shell-storm.org/CTF

Webapp Specific

• demo.testfire.net
• wocares.com/xsstester.php
• crackme.cenzic.com
• test.acunetix.com
• zero.webappsecurity.com

Forensics Specific

• computer-forensics.sans.org/community/challenges
• forensicscontest.com

Recruiting

• praetorian.com/challenges/pwnable
• rtncyberjobs.com
• 0x41414141.com

Paid Training

• heorot.net

• badstore.net
• owasp.org/index.php/Category:OWASP_WebGoat_Project
• owasp.org/index.php/Owasp_SiteGenerator
• Damn Vulnerable Web App
• Stanford SecureBench
• Stanford SecureBench Micro
• irongeek.com/i.php?page=security/mutillidae-deliberately-vulnerable-php-owasp-top-10

Virtual Machines

• pentesterlab.com/exercises/
• sourceforge.net/projects/metasploitable/files/Metasploitable2/
• Damn Vulnerable Linux