Resources
START HERE - PicoCTF's personal primer for starting CTFs. This will teach you the basics of literally everything you would need to know to start it off
Further shoutout to PWN College for its intro courses. If you're brand new and haven't interacted with the Linux CLI much, go check out the Start Here and Linux Luminarium modules in the Dojo, since they'll help you get your feet under you. By no means should you feel like you need to do all of it, but it's a good place to play around with Linux and some of the fundamental skills.
If you have any questions about this, just shoot a DM to Macen (@overllama) on Discord. I'm happy to answer questions, take complaints / suggestions, give pointers, or help with anything else CTF-related you might need atm.
Web
- PortSwigger Web Academy - gold standard for web education
- OverTheWire Natas - yes, we have OverTheWire elsewhere, but Web needed an extra resource
Crypto
- CryptoHack - really nice course-like structure and subsequent challenges for further learning
- CryptoPals - challenges, also in a guided manner. Much more subsequent depth in a linear fashion
- BlockBreakers - guide to AES and associated cryptanalysis
- An Introduction to Mathematical Cryptography (Book) - gold standard in cryptography books
Forensics
- Forensics - opinion-heavy, but actually a good beginner forensics resource
- THM Advent of Cyber 2023 - okay hear me out, just go and do Day 7 "'Tis the season for log chopping". It taught me everything I know about command line log forensics, and I would recommend it to anyone
Rev
- Microcorruption - great reversing exercises on embedded
- reversing.kr - interesting challs
- Reverse Engineering challenges - worst UI I've ever seen but there's an attached e-book and lots of challs
- crackmes - too many challs, tbh, but good for reps
PWN
- PWN College - frankly, the gold standard for courses in computer security
- Nightmare - walkthroughs and explanations of tons of different pwn challenges
- ROP Emporium - ROP. Need I say more?
- how2heap - Shellphish's resource on heap exploitation education
- Ir0nstone - Ir0nstone's personal notes on PWN
- Exploit Education - qemu vm with pwn challenges from super easy to some basic heap / format strings
- Temple of PWN - DSU Student-Led PWN course from a few years back. Still a fantastic resource
- Kernel Exploitation - interesting resource if you want to get into kernel pwn, walkthrough of a CTF challenge plus additional information
Misc
- hextree.io - Live Overflow's courses on various things, notably Android and hardware exploitation and reverse engineering
- overthewire - they have various wargames, ranging from basic CLI to more complex topics in exploitation of various systems
- GoogleCTF Beginner's Quest - beginner challs based on the annual GoogleCTF
- W3Challs - lots of challenges
- SIGPwny Challenges
- ImaginaryCTF