redbunny

Practice CTF List / Permanant CTF List

Feb 6th, 2018
2,577
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.15 KB | None | 0 0
  1. http://captf.com/practice-ctf/
  2.  
  3. Here's a list of some CTF practice sites and tools or CTFs that are long-running. Thanks, RSnake for starting the original that this is based on. If you have any corrections or suggestions, feel free to email ctf at the domain psifertex with a dot com tld.
  4.  
  5. Live Online Games
  6. Recommended
  7.  
  8. Whether they're being updated, contain high quality challenges, or just have a lot of depth, these are probably where you want to spend the most time.
  9.  
  10. http://pwnable.tw/ (a newer set of high quality pwnable challenges)
  11. http://pwnable.kr/ (one of the more popular recent wargamming sets of challenges)
  12. https://picoctf.com/ (Designed for high school students while the event is usually new every year, it's left online and has a great difficulty progression)
  13. https://microcorruption.com/login (one of the best interfaces, a good difficulty curve and introduction to low-level reverse engineering, specifically on an MSP430)
  14. http://ctflearn.com/ (a new CTF based learning platform with user-contributed challenges)
  15. http://reversing.kr/
  16. http://hax.tor.hu/
  17. https://w3challs.com/
  18. https://pwn0.com/
  19. https://io.netgarage.org/
  20. http://ringzer0team.com/
  21. http://www.hellboundhackers.org/
  22. http://www.overthewire.org/wargames/
  23. http://counterhack.net/Counter_Hack/Challenges.html
  24. http://www.hackthissite.org/
  25. http://vulnhub.com/
  26. http://ctf.komodosec.com
  27.  
  28. Others
  29.  
  30. https://www.onlinectf.com/challenges/
  31. https://backdoor.sdslabs.co/
  32. http://smashthestack.org/wargames.html
  33. http://hackthecause.info/
  34. http://bright-shadows.net/
  35. http://www.mod-x.co.uk/main.php
  36. http://scanme.nmap.org/
  37. http://www.hackertest.net/
  38. http://net-force.nl/
  39. http://securityoverride.org/ Some good concepts, but "canned" vulnerabilities (string matching on input) will frustrate knowledgable hackers and teach newbies the wrong lessons
  40.  
  41. Meta
  42.  
  43. http://www.wechall.net/sites.php (excellent list of challenge sites)
  44. http://ctf.forgottensec.com/wiki/ (good CTF wiki, though focused on CCDC)
  45. http://repo.shell-storm.org/CTF/ (great archive of CTFs)
  46.  
  47. Webapp Specific
  48.  
  49. http://demo.testfire.net/
  50. http://wocares.com/xsstester.php
  51. http://crackme.cenzic.com/
  52. http://test.acunetix.com/
  53. http://zero.webappsecurity.com/
  54.  
  55. Forensics Specific
  56.  
  57. http://computer-forensics.sans.org/community/challenges
  58. http://computer-forensics.sans.org/community/challenges
  59. http://forensicscontest.com/
  60.  
  61. Recruiting
  62.  
  63. https://www.praetorian.com/challenges/pwnable/
  64. http://rtncyberjobs.com/
  65. http://0x41414141.com/
  66.  
  67. Paid Training
  68.  
  69. http://heorot.net/
  70.  
  71. Downloadable Offline Games
  72.  
  73. http://www.badstore.net/
  74. http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
  75. http://www.owasp.org/index.php/Owasp_SiteGenerator
  76. Damn Vulnerable Web App
  77. Stanford SecureBench
  78. Stanford SecureBench Micro
  79. http://www.irongeek.com/i.php?page=security/mutillidae-deliberately-vulnerable-php-owasp-top-10
  80.  
  81. Virtual Machines
  82.  
  83. https://pentesterlab.com/exercises/
  84. http://sourceforge.net/projects/metasploitable/files/Metasploitable2/
  85. Damn Vulnerable Linux (not currently live? local mirror)
  86.  
  87. Inactive or Gone
  88.  
  89. Just around for historical sake, or on the off-chance they come back.
  90.  
  91. http://rootcontest.com/
  92. http://intruded.net/
  93. https://how2hack.net
  94. WebMaven (Buggy Bank)
  95. http://www.foundstone.com/us/resources/proddesc/hacmetravel.htm
  96. http://www.foundstone.com/us/resources/proddesc/hacmebooks.htm
  97. http://www.foundstone.com/us/resources/proddesc/hacmecasino.htm
  98. http://www.foundstone.com/us/resources/proddesc/hacmeshipping.htm
  99. http://hackme.ntobjectives.com/
  100. http://testphp.acunetix.com/
  101. http://testasp.acunetix.com/Default.asp
  102. http://prequals.nuitduhack.com
  103. http://www.gat3way.eu/index.php (Russian)
  104. http://exploit-exercises.com/ (challenges mirrored on vulnhub)
  105. http://damo.clanteam.com/
  106. http://p6drad-teel.net/~windo/wargame/
  107. http://roothack.org/
  108. http://ha.ckers.org/challenge/
  109. http://ha.ckers.org/challenge2/
  110. http://www.dc3.mil/challenge/
Advertisement
Add Comment
Please, Sign In to add comment