CTFs

07CTF is a 36-hour Capture The Flag competition organized by team 0bscuri7y. The event features challenges across a variety of categories, including web, crypto, forensics, OSINT, misc, and reverse engineering. With tasks ranging from beginner-friendly to more advanced, 07CTF is designed to offer something for everyone. There is no team size limit. Challenges will be released in two waves to keep the competition engaging throughout its duration. Whether you're just starting out or looking for a serious test of your skills, 07CTF aims to provide a balanced and enjoyable experience for all participants. Start: 13 September 2025, 12:00 IST End: 15 September 2025, 00:00 IST Duration: 36 Hours Discord - https://discord.gg/McFJYRQ9DM Sponsors: OtterSec: Cash Prize Google: Infra sponsored by goo.gle/ctfsponsorship .xyz Domains

The Chaos Computer Club's annual congress. Four days of talks, art, hardware, lockpicking and politics in Hamburg. Tickets go fast.

Welcome to the AMSI CTF 2025, a cybersecurity competition organized by the Association of Master Sécurité Informatique (AMSI) of Sorbonne Université. This exciting event brings together "la crème de la crème" of cybersecurity students to test their skills in a series of challenging security puzzles and scenarios. On June 13-14, participants will tackle various challenges across multiple categories including cryptography, web, reverse engineering, forensics, and more. Thanks to our sponsors : Orange Cyberdefense, Quakslab, Root-Me Pro, RedBull, and Aforp.

ASIS CTF Quals 2025

AlpacaHack is a new CTF platform for individual competitions. AlpacaHack Round 12 (Crypto) is the 12th CTF hosted by the AlpacaHack team, featuring 4 Crypto challenges. The challenges are designed with a wide range of difficulties, making them enjoyable for participants of all levels, including beginners. They are created by yu212.

AlpacaHack is a new CTF platform for individual competitions. AlpacaHack Round 13 (Crypto) is the 13th CTF hosted by the AlpacaHack team, featuring 4 Crypto challenges. The challenges are designed with a wide range of difficulties, making them enjoyable for participants of all levels, including beginners. They are created by soon-haari.

OWASP AppSec Israel, a standout event, is born out of the diligent efforts of our dedicated team. Meet our team, striving to make AppSec Israel an unrivaled conference in the realm of security! Introducing AppSec-IL Capture the Flag! A compact, high-octane challenge set in the dynamic fields of Application Security, CI/CD, DevOps, Mobile, AI, and Cloud security. Get ready for a test of skill and strategy at this year's OWASP AppSec Israel conference!

Welcome to BCACTF 6.0!!! Returning for the sixth year in a row, this highschool CTF from the Bergen County Academies presents challenges in a variety of difficulties targeting everyone from beginners to CTF veterans! Infra sponsored by goo.gle/ctfsponsorship.

BDSec CTF 2025 is an international, 24-hour online jeopardy-style Capture The Flag competition organized by Knight Squad, a cybersecurity team from Bangladesh. Held annually, BDSec CTF is designed to push boundaries, encourage learning, and celebrate strategic brilliance in cybersecurity — open to participants around the globe. The event pays tribute to Bangladesh’s history of resistance and courage, drawing inspiration from the 1952 Language Movement and the 1971 Liberation War. In this CTF, your mind is your shield, and your keyboard is your weapon. Whether you're a student just entering the field or a seasoned infosec professional, BDSec CTF 2025 welcomes you to test your skills, think critically, and hack with honor. Think Fast, Hack Smart, Win The Game!! Registration is OPEN now → https://2025.bdsec-ctf.com Diamond Sponsor: OtterSec Standard Sponsors: Bugcrowd Parrot CTFs Bounty Security NS TechValley Community Partner: KS HackZone

Berlin's chapter of the global BSides movement. Single-day community conference with a strong European researcher lineup.

Community-organized infosec un-conference held the days before DEF CON. Single-track talks, a packed Pros vs. Joes CTF and a famously social hallway track.

Get ready for the inaugural BSides Mumbai Capture The Flag (CTF) 2025! This online Jeopardy-style CTF is open to everyone - from curious beginners to experienced ethical hackers. Whether you're sharpening your skills or just starting your journey, you'll find challenges tailored for all skill levels. Participants will compete across a wide range of categories, testing their creativity, technical expertise, and problem-solving abilities. Challenge Categories: Web Mobile (Android) Web3 Artificial Intelligence (AI) Cryptography Pwn Reverse Engineering Forensics Miscellaneous (Steganography, OSINT, Windows, Linux, Networking) Need assistance or have questions? Get in touch: ctf@bsidesmumbai.in Stay updated and connect with us: LinkedIn: https://in.linkedin.com/company/bsidesmumbai Whatsapp: https://chat.whatsapp.com/FOLa4NT7zHQ7AoDx4CgwEa Twitter: https://x.com/BSidesMumbai Facebook: https://www.facebook.com/bsidesmumbai Instagram: https://www.instagram.com/bsidesmumbai/ Discord: https://discord.gg/2KRGQWBGR3 Youtube: https://www.youtube.com/@BSidesMumbai

BelkaCTF is a digital forensics CTF held by Belkasoft, the vendor of Evidence Center X forensic toolkit. Unravel an investigation story by solving a series of diverse DFIR challenges. The CTF is open to both professional forensic analysts and enthusiastic amateurs. <i>* * * — Damn these blue screens to hell! — The Chief sucked on his cigar so hard I thought his lungs would surrender first. — Half the country's on pause! — Airports, hospitals, power plants… all crashed into that lovely blue abyss, — I nodded, lazily jamming a USB stick into my laptop. — Except one terminal. — Which one? — The dispatcher's workstation at the airport. Didn't BSOD like the rest — instead, it runs some weird locker, blasting propaganda: "Hit the streets on this date, show 'em who's boss..." The Chief let out a dry chuckle: — So, detective, what's your take? — My take? This ain't some script kiddie brag. Someone's playing crowd control through hijacked Windows boxes. He exhaled smoke slowly, eyes gleaming: — Then it's time we find out who woke up the streets from behind a ransom screen. — Already on autopilot, Chief. Just don’t mess with my coffee mug.</i>

Black Hat's European stop. Two days of training plus two days of briefings, with a particular focus on operational security, ICS and EU policy.

2025 edition of Black Hat USA at Mandalay Bay. Notable themes: agentic-AI security, supply chain attacks, and continued investment in defensive automation tracks.

The largest commercial information security conference. Four days of hands-on technical training followed by two days of briefings, a vendor expo and the Black Hat Arsenal open-source tools track.

Black Hat MEA in collaboration with Saudi Federation for Cybersecurity, Programming & Drones (SAFCSP) will host a CTF Tournament and powered by FlagYard Platform, with over 500 participants (125 teams) entering the final stages at different levels of competency: amateur, intermediate and expert. CTF competition run as a jeopardy-style competition and team based both in the qualification and final stages. Participants will be challenged across a range of categories during the competition including Web, Reverse Engineering, PWN, Crypto and Forensics. Qualification Round: - Date: 24 hours from 07 Sep 2025, 10:00 GMT (01:00 PM KSA Time) - Location: Online. Final Competition: - Date: 2-4 Dec 2025 during Black Hat MEA conference - Location: On-Site - Riyadh

?️ BlitzCTF 2025 – Presented by BlitzHack ? July 5th, 8:00 PM IST – July 7th, 8:00 AM IST Get ready for BlitzCTF 2025, the ultimate cybersecurity showdown hosted by BlitzHack! Whether you're a seasoned hacker or just stepping into the world of Capture the Flag, this competition is designed to test your skills, creativity, and speed across a wide range of categories. ? Categories: Pwn Crypto Forensics Web Reversing Misc Hardware OSINT ? Duration: 36 hours of non-stop hacking – From 5th July 8:00 PM IST to 7th July 8:00 AM IST ? Sponsors: Proudly sponsored by Altered Security and OtterSec ? Prizes: TBA – But rest assured, there’s more than glory on the line! Whether you're playing solo or with a team, mark your calendars, sharpen your tools, and get ready to Blitz your way to the top!

? Blue Arena – The Ultimate Forensics Battleground Step into the Blue Arena, a high-stakes digital warzone where only the sharpest minds will survive. Hosted by the renowned CSEM CTF platform, this forensics-specific Capture The Flag event challenges participants to dive deep into the world of cyber investigation and digital forensics. In this one-of-a-kind arena, you'll face thrilling, real-world inspired challenges — from dissecting encrypted files and analyzing memory dumps to tracing digital footprints and unmasking hidden artifacts in compromised systems. Your investigative instincts, speed, and precision will be pushed to the edge. Whether you're a cybersecurity student, an experienced analyst, or an ethical hacker with a passion for digital truth-seeking, the Blue Arena is your battlefield to showcase your skills, compete with global minds, and rise as a true cyber forensics warrior. ? Key Highlights: ? Forensics-only CTF challenges ? Memory analysis, file carving, log tracing, OSINT, and more ? Compete with elite participants from across the nation ? Live scoreboard, rewards, and certificates for top performers ? Immersive platform hosted on CSEM CTF ? Location: Online (CSEM CTF Platform) Are you ready to investigate, analyze, and conquer the arena? Join the Blue Arena — where every byte tells a story.

Get ready all cyber chefs and code connoisseurs, Brunnerne has cooked up their very first BrunnerCTF for all of you to enjoy! We have prepared a fresh batch of delicious challenges with all your favorite flavors: Web, forensics, rev, crypto, pwn, OSINT - but perhaps also a few secret ingredients to surprise your palette! The CTF is aimed mostly at home cooks with a bit of experience, but we have something for every taste: From an entire "Shake & Bake" category for those most comfortable sticking to instant noodles to a few chef's specials that will challenge even the most experienced Masterchefs. Site: https://ctf.brunnerne.dk/ Discord: https://discord.gg/ZSNXY2sjyJ Proudly sponsored by: - Campfire Security - CyberSkills - Bankdata - Hetzner (infrastructure): https://htznr.li/BrunnerCTF

This CTF is organized in association with CRACCON 2025. First preliminary round for global participants for CRACCON 2025 will take place on 6th September, 2025. Qualified teams will be given the opportunity in the final round which will take place offline on 4th October 2025. Join us on Oct 4-5th, 2025, at IIC, Delhi, for a full-day experience from 8 AM to 9 PM, packed with hacking challenges, workshops, networking, and exclusive opportunities to connect with leaders in tech.

the ctf challenge by CRHC Here is the contest discord server: https://discord.gg/exfgSVCXZK

Welcome to the CRMA mini CTF 2025 — a 24-hour internal cybersecurity challenge exclusively. This event is designed to strengthen cyber defense skills through hands-on challenges across categories including Web, Prog, Rev, Pwn and Mobile Security. Sponsored by: - No sponsors yet. Contact us if you're interested! Join us, rise to the challenge, and prove your skills. https://discord.gg/Mw48w29A

NOW STARTING SATURDAY 9/13 16:00 UTC Discord: https://discord.gg/cc6HrbAh CSAW CTF is one of the oldest and biggest CTFs with 1181 teams with 1+ points in 2024. Designed as an entry-level, jeopardy-style CTF, this competition is for students who are trying to break into the field of security, as well as for advanced students and industry professionals who want to practice their skills. Our competition occurs over two rounds: a Qualifying Round in September and a Final Round in November. Conference Sponsor - DTCC Rules: https://docs.google.com/document/u/2/d/e/2PACX-1vQd86UHImwnQxZoLFi8ShZ1DxP37dDegPyjWe40j9mIXlTdp5syPP5DAX0pGJXdpFxCVzklmVQ_wmld/pub

NYU Tandon's student-friendly competition; the qualifier feeds into regional finals.

NYU Tandon qualifier — student-friendly jeopardy feeding regional finals.

CyberCamp UMU CTF 3.0 is the third and final edition of the Capture The Flag competition organized by the University of Murcia as part of the CyberCamp UMU initiative. This is a free, 100% online, individual CTF, open to all skill levels. Whether you're just starting out in cybersecurity or you're an experienced player looking for a challenge, this event is for you. - IMPORTANT! ~ Only for spanish people - Dates: July 11–13, 2025 - Starts: Friday at 15:00 (CEST) – Ends: Sunday at 22:00 (CEST) - Format: Jeopardy-style | Individual | Online Categories include: - Web exploitation - Binary exploitation (PWN) - Cryptography - Forensics - And more surprises Join us, challenge yourself, and enjoy three intense days of hacking, learning, and fun. Are you ready?

BI.ZONE is ready to announce the date of CTFZone Quals 2025! The first online stage will take place on August 16 at 10 AM (UTC) and will last for 24 hours. The stage format – Jeopardy – includes several categories: web, pwn, crypto, reverse and PPC. TOP-10 performers will proceed to the second online Attack/Defence stage of CTFZone in November 2025. The infrastructure of this event is sponsored by Yandex Cloud.

Crypto CTF is an online competition for hackers to test, evaluate, and expand their skills in exploiting cryptography. In this CTF, we will provide various crypto challenges that focus on modern cryptography techniques. All crypto lovers are most welcome! Crypto CTF is a response to the longstanding complaints by CTF participants about the crypto challenges in CTF contests. In this brand-new tournament, we aim to provide crypto enthusiasts with fun and challenging pure crypto tasks that will truly test their passion for cryptography. Each task will be based on a specific cryptographic primitive or will involve a direct application of cryptography in other fields. The organizers of these tournaments generously offer their knowledge and skills to design original Crypto tasks and challenges for similar contests. Long Live Crypto :) Discord: https://discord.gg/RsvAJtF5Q5 Twitter: https://twitter.com/Crypto_CTF

CubeMastery is holding its inaugural CTF 1776 July 4 (aka 6:16pm EDT) - 2025 July 6 (aka 8:25 EDT). It will be a traditional jeopardy-style CTF, with medium-hard challenges covering web, rev, pwn, crypto, forensics, and misc categories. The CTF will be open to all teams internationally of all ages and skill levels. Infra sponsored by goo.gle/ctfsponsorship, further sponsors and prizes TBD. Site: https://cubectf.com Discord: https://discord.gg/KkVajD3JWF

?️‍♂️ Cyber Arena CTF 2025 by CSEM Get ready for Cyber Arena CTF, a thrilling 2-day cybersecurity competition hosted by CSEM from 5th July to 6th July 2025! Sharpen your skills and challenge your knowledge across multiple categories: ?️ Web Exploitation ?️ Cryptography ? Reverse Engineering ? Forensics ? OSINT ?️ Steganography

? Purpose Select top 30 women with natural offensive cybersecurity skills through practical challenge-based evaluation. LEVEL is early beginners and FEMALE only ? Format Hybrid event: Onsite at KITRI War Room (Seoul) and remote participation - https://en.kitribob.kr/ ? Organizers & Host Platform • FKCA (French Korean Cyber Alliance) – strategic coordination and leadership. • RALFKAIROS – operational lead for CyberLumen program. • Kairos (FKCA Member) – technical organizer of the event, platform deployment, and content provision via Purple Hackademy CTF infrastructure. • Global Women in Korea – community outreach and participant recruitment. ? Guest Speakers • Jay Turla (DEFCON, RootCon) • Yi-Ting Shen, Security Researcher | Conference Speaker | AI/ML Researcher | PenTest • Professor KW Lee - Korean Academic Expert in Cybersecurity • Eunkyung Lee - Security Researcher of Korea Internet & Security Agency (KISA) • Jay Turla - Principal Security Researcher (Automotive) at VicOne • Hyuna Lee - Ransomware Researcher / CTF Player at SK Shieldus • Azam Ahmad - President Advisory board at FKCA ? Partners • FKCA • RALFKAIROS • Global Women in Korea (GWK) • Root-Me PRO (platform sponsor) • BoB KITRI (host sponsor) ? Location KITRI War Room (Seoul) – up to 80 participants with PC availability, microphone, and full-day venue access. ? Timeline Saturday, June 21, 2025 Event runs from 9:00 AM to 8:00 PM KST. ? Target Participants • Female students from Korean universities • Members of the Global Women in Korea network • Beginners welcome – focus on logic, creativity, and potential. ? Participant Objectives • Verify their interest in shifting careers to offensive cybersecurity—even without prior exposure. • Learn how to generate side income via bug bounty platforms. • Understand offensive cyber career paths through expert talks. • Test

CyberSci is Canada's national Cyber Security Challenge for university and college students. - Think you've got an elite team of students? Come and prove it. Our winners will go on to compete against the best in the world. - Just starting out? This is the best way to learn and rise to the top. - Annual in-person events since 2016. Over 500 students so far. We run the Canadian national finals in Ottawa in the summer. - The winning team from each CyberSci regional event is invited to attend the national finals. - An all-women’s team, an all-juniors team, and an all-Indigenous team are also invited. - The 4-day on-site event has a Jeopardy and a Defense competition. - Top teams from the nationals go on to represent Canada at international events.

Monthly Paris chapter meetup of DEF CON Groups. Beers, lightning talks and CTF write-ups in a relaxed bar setting. Open to anyone, no badge required.

33rd edition of DEF CON, held in August 2025 at the Las Vegas Convention Center. Headline themes included AI red-teaming, automotive ECUs and post-quantum crypto.

The world's largest hacker convention. Multiple talk tracks, dozens of villages (Car Hacking, ICS, Bio-Hacking, AI, …), the DEF CON CTF Finals, badge hacking and an irreverent culture you have to experience to understand.

Qualifier for the DEF CON 32 finals (Las Vegas). Hosted by the Nautilus Institute.

Qualifier for DEF CON 33 finals, organized by the Nautilus Institute.

Attack-defense final between the 12 teams that qualified through Nautilus Institute's quals. Held on the DEF CON main floor over three full game days.

Duration: Each CTF lasts 4 hours. SIEM Options: Choose between Splunk and Elastic for your SIEM tool. Communication: Join our DFIR Labs CTF Discord Server for support and real-time updates. Cases: You will receive access to 1 detailed intrusion cases 1 hour before the start of the CTF. Cases include network and endpoint logs as well as Sigma and YARA hits. Questions: Complete 20+ questions within the 4-hour timeframe. Access: All you need is a web browser. Support: Live support on Discord. Winners: Top 3 players will receive a discount on swag, as well as names in the CTF winners page.

The 18 best junior, and 18 best German senior participants as well as the 6 best DACH of the https://ctftime.org/event/2588/ are competing together with the best DACH Teams of the following events: https://ctftime.org/event/2351/, https://ctftime.org/event/2402/, https://ctftime.org/event/2490/ and https://ctftime.org/event/2438/

DIVER OSINT CTF is the real-world oriented OSINT CTF. We provide country/region-neutral OSINT challenges. Challenges will be available in English and Japanese. Anyone is welcome to join. Discord: https://discord.gg/k9BmnDQxNV Twitter: https://x.com/DIVER_OSINT_CTF

DeadSec CTF 2025 is an online jeopardy-style CTF organized by DeadSec Team. ## Category There will be challenges with a wide range of difficulty mainly from cryptography, reverse, pwn, web, misc... ## Sponsor Infra sponsored by goo.gle/ctfsponsorship Offsec (https://www.offsec.com/) The winner of DeadSec CTF will qualify for the MaltaCTF 2025 Finals in Valletta, Malta.

Mark Your Calendars! The DefCamp Capture the Flag (D-CTF) Qualification Phase is Locked and Loaded for 2025! Get ready to dive into the most electrifying and audacious security CTF competition in Central and Eastern Europe—DefCamp Capture The Flag (D-CTF)! This is where the sharpest hackers and IT masterminds come together to push their skills to the limit, battling it out with top CTF teams from around the globe. The mission? Secure a spot in the elite top 10 and ultimately conquer the D-CTF competition—or go down fighting! Since 2011, DefCamp Capture the Flag has been the ultimate battleground for over 10,000 players. This annual, multi-stage event is open to all, but remember one crucial rule—hack or be hacked! Event Highlights Brace yourselves for an adrenaline-packed adventure with around 10 beginner-friendly challenges and 15 more difficult tasks that will test even the most seasoned players. Format: Jeopardy Play Format: Team-only Genres: Crypto, Pwning, Reversing, Web, Forensics, Miscellaneous… Language: English Access: Open / Free for everyone Difficulty: Entry Level - Easy - Medium - Hard - Insane The Challenge Awaits Tackle a variety of challenges across multiple categories. Exploit system weaknesses, follow cryptic hints, and uncover hidden secrets. Each challenge holds a unique flag in the format CTF{sha256 random message}. Capture it, submit it on our platform, and rack up your points. CTF competitions are a thrilling mix of puzzles and challenges, including reverse-engineering, memory corruption, cryptography, web tech, and more. Solve them, capture the flag, and climb the leaderboard to victory! Organizers & Partners This epic event is brought to you by the Cyber Security Research Center from Romania (Asociatia Centrul de Cercetare in Securitate Informatica din Romania) under the banner of DefCamp, Romania's largest an

Qualifier run by DiceGang — jeopardy across web, pwn, crypto, rev, and misc.

DiceGang qualifier for the 2026 season.

DownUnderCTF is the largest online Australia and Aotearoa (NZ) run Capture The Flag (CTF) competition. This CTF aims to up-skill the next generation of Cyber Security Professionals and to grow the CTF community in the AUNZ region. DownUnderCTF is a completely free online event open to all participants around the world. Prize eligibility is restricted to Australian and Aotearoa (NZ) Secondary or Tertiary school students to encourage collaboration and healthy competitive spirit between the nations whilst also promoting cybersecurity skills to students. With over 4600+ players and 2100+ teams in 2024 from complete beginners to seasoned CTF veterans, our diverse community is strong and we hope you can join us for 2025!

The 9th installation of the epic ENOWARS trilogy! More details on our landing page ENOWARS's top-ranked DACH team will also secure a spot at the 2026 DHM. The DHM (Deutsche Hacking Meisterschaft) is a 6-person team competition focused on fostering the best cybersecurity talent from across Germany. The qualification process for the DHM is split into two paths: half of the participants earn their place through the CSCG (Cyber Security Challenge Germany), a two-month individual competition, while the other half qualify through team-based events like this one. The winning DACH team should contact dhm@nfits.de to confirm their qualification and receive further instructions on how to participate.

Global gathering of CSIRTs and incident response teams. Closed sessions for FIRST members on Monday, public conference Tuesday through Friday covering threat intel sharing, IR tooling and operational coordination.

This is the third global CTF organized by employees of Blockhouse Technology Zagreb (tbtl.com). This time, under our new brand name - Fort ID (https://fortid.com/) - a privacy-first, secure, and EUDI compliant identity solution. The contest will be in the Jeopardy format, featuring all of the standard categories (web, crypto, rev, pwn, misc). We will have a wide range of challenges, from beginner-friendly ones, all the way to some spicy ones which should hopefully be interesting to seasoned players as well. For more details, please visit https://fortid.ctfd.io/ If needed, you can always contact us at ctf@tbtl.com or our Discord server (https://discord.gg/G2n2Eqxa).

Full Weak engineer CTF is a Jeopardy-style CTF competition organized by the CTF team full weak engineer(脆弱エンジニア). The event features challenges across a wide range of categories, including Web, Pwn, Reversing, Crypto, and Forensics/OSINT. It is designed to be enjoyable and engaging for both beginners and experienced players.

The GPN CTF 2025 is this year’s CTF edition organized by KITCTF. Play online or in person at the GPN. This is a student run jeopardy-style CTF with challenges from the categories crypto, pwn, reversing, web and misc (including some more exotic ones). Featuring both a range of easy challenges from each category and a majority of hard challenges it will be a great CTF for beginners and experienced players alike. Communication channels: https://discord.gg/TxPA4ZVUnm Thank you to our sponsors for supporting the CTF! * Main & Prize Sponsor: GitHub Security Lab * Writeup Sponsor: Zellic * Infrastructure Sponsor: TelemaxX Telekommunikation GmbH Learn more about our sponsors and opportunities they have: https://gpn23.ctf.kitctf.de/#sponsors

The Goldrush Gauntlet CTF 2025 is a Jeopardy-style Capture-The-Flag competition that has been moved online. It will take place online from 9AM June 7 - 5PM June 8, Eastern Time.

Annual jeopardy CTF run by Google's security team.

Annual jeopardy CTF run by Google's security team.

Google's annual jeopardy-style CTF. Online 48-hour qualification round; top teams advance to an invite-only hackceler8 finale at Google offices.

categories: web, pwn, crypto, reversing, misc # Feedback If you have suggestions on how we could improve for next year, please feel free to fill out the feedback form: https://forms.gle/KACEBk3rb3EUtRSx9 If you have specific feedback about a challenge, fill out the task feedback form: https://forms.gle/o8aLtWTE47uH3iqn7

Hacks In Taiwan Community — Taiwan's largest hacker conference. Two days of talks in English and Mandarin covering offensive research, hardware reversing and APT analysis.

Taiwanese hacker conference's flagship jeopardy CTF.

Flagship jeopardy CTF from HITCON (Taiwan).

[TBD]

HITCON Cyber Range is one of Taiwan's benchmark challenges for Blue Teams, testing not only technical depth but also the limits of teamwork and on-the-spot reaction. Through HITCON Cyber Range, you will: Experience the most realistic cybersecurity incident response processes. Hone investigation skills to uncover the truth from subtle clues. Enhance practical defense capabilities against real-world threats. ## Organisations Advising Organisation: Administration for Digital Industries, Ministry of Digital Affairs Organisers: Association of Hackers in Taiwan (HIT) / Industrial Technology Research Institute (ITRI) ## Competition Description The HITCON Cyber Range competition will proceed in two main stages: first, the Global Online Qualifiers, followed by the On-site Finals held in Taiwan. Participating teams must pass the challenges of the Online Qualifiers to be eligible for the Finals. ## Important Dates (All times are UTC+8) Registration Deadline: June 30, 2025 (Monday) 23:59 Global Online Qualifiers: July 18, 2025 (Friday) 10:00 - 23:59 (14 hours total) Announcement of Finalists and Details: September 1, 2025 (Monday) Offline Finals & Award Ceremony: October 17, 2025 (Friday) ## Finals Qualification Rules A minimum of 10 teams are expected to advance to the Finals. Qualification slots include: - Top 5 domestic corporate teams from the Online Qualifiers. - 2 teams recommended by F-ISAC. - 3 reserved slots for international teams. - On-site Finals & Award Ceremony Venue Venue: Taipei New Horizon Building, 6F Function Room - Address: 6F, No. 88, Yanchang Road, Xinyi District, Taipei City, Taiwan ## Contact Information - If you have any questions, please feel free to contact the HITCON Cyber Range team via Email: cyberrange@hitcon.org ## Awards and Recognition I. Qualifiers Teams that meet the eligibility criteria and fully part

Hong Kong computer emergency response team annual CTF.

2 Very Easy, 2 Easy & 1 Medium Web Challenges The digital world has been overtaken by The Patchwork, a sprawling virtual network designed to safeguard global infrastructure. At its center lies The Architect, an AI originally created to defend the internet from vulnerabilities. But The Architect has gone rogue, exploiting critical flaws to sow breaches, chaos, and catastrophic data loss. Its relentless attacks threaten to plunge humanity into the Cyber Dark Ages, where no data, system, or network can be trusted. You are one of The Hunters. Armed with your expertise in web vulnerabilities, you must hack into high-profile institutions such as universal banking apps, healthcare systems, and global data repositories that have been compromised by The Architect. By exploiting the vulnerable systems, you can identify and mitigate flaws, dismantling The Architect’s control piece by piece.

Program : 2pm - Welcome 15h - Talks 18h - CTF 06h30 - Awards ceremony Categorie : AD / System / OSINT / Web / Pwn / Social Engineering / Lockpicking / Web3 / Forensic / MISC Tickets €25. The price includes full access to the event, evening meal from our caterer, food all night, stock of RedBull, breakfast, goodies, etc. More infos on our website !

Small, technical European conference organized by CIRCL. Four days of talks, hands-on workshops and a MISP threat-intel summit.

IERAE CTF is the CTF organized by ierae, the CTF team of GMO Cybersecurity by Ierae, Inc. GMO Cybersecurity by Ierae, Inc. is a Japanese security company with many CTF players. We have been helped by and grown with those CTF players, and now we want to help energize the community.

ImaginaryCTF 2025 will now take place from September 5-7. ImaginaryCTF 2025 is a cybersecurity CTF competition run by ImaginaryCTF with a variety of challenges for all skill levels, running from September 5-7. Teams will be challenged to discover vulnerabilities in websites, crack codes, and recover information through challenges in cryptography, binary exploitation, web exploitation, forensics, reversing, and more. We hope that you will learn something new from our challenges!

This CTF has been designed keeping in with the theme of Mission Impossible 8: Final Reckoning and is paying tribute to the Mission Impossible franchise.

Europe's flagship information security exhibition and conference. Three days of vendor keynotes, technical workshops and an enormous exhibitor floor at ExCeL London.

Casual CTF for beginner to intermediate levels. Good if you expect the Google one this weekend will be a bit much. Challenges in the category of: - Reversing - Web exploitation - Forensics - Cryptography

Junior.Crypt.2025 CTF — an open cybersecurity competition for university students, college and school students, and anyone interested. This is a 48-hour online event. We hope all participants will be able to fully apply their skills and have a great time. The CTF is organized by students from the Department of System Programming and Computer Security at Yanka Kupala State University of Grodno, Grodno, Belarus. Team participation is required, with teams consisting of 1-4 members. Challenges will cover various categories—beginner, cryptography, forensics, miscellaneous, OSINT, ppc, pwn, rev, and web. The official languages of the tournament are Russian and English. However, you can still participate even if you don’t speak either. We will do our best to ensure that every task is understandable with machine translation. Additionally, throughout the competition, we will introduce participants to the extraordinary beauty of our country—the Republic of Belarus.

<strong>Kuban CTF</strong> is a team competition where you and up to four teammates can challenge your cybersecurity skills. You'll face creative and engaging tasks that test your challenge-solving abilities. The top 10 teams from the qualification round will advance to the semifinals, and the top 5 teams from the semifinals will move on to the finals! At the VI International Information Security Conference Kuban CSC 2025, held in the Sirius federal territory. The semifinals take place on October 23, followed by an exciting <strong>Attack-Defense final on October 24.</strong> Compete by attacking, defending, and strategizing to prove your expertise! <strong>Finalists enjoy:</strong> • Free accommodation • Meals provided • Fun social events Don’t miss the chance to become a champion — register now via the link!

L3HCTF 2025 is a Jeopardy-style Online Capture The Flag Competition presented by Team L3H_Sec. The contest is open to all participants around the world. Teams can compete from any location. No restriction on the number of participants of any team. The Champion Team of L3HCTF 2025 will be invited to The Finals of the 9th Edition of XCTF(the location/date is subject to change, qualified teams will be informed when the Finals location/date is confirmed). Other teams can also get the cumulative points to compete for other slots in The Finals of the 9th Edition of XCTF.

Beginner-friendly CTF. Challenge difficulty will range from beginner to expert. 10 categories: crypto, web, rev, pwn, forensics, osint, mobile, hardware/rf, hash cracking, and misc. We have created 60+ awesome challenges for you to enjoy with lots of prizes. Gather your hacking crew and be prepared to battle it out in the BEST CTF competition of the year! Discord: https://discord.gg/wjSVdt3a7G Infra sponsored by goo.gle/ctfsponsorship We'd like to sincerely thank all our sponsors for their generous support and contribution to the prize pool: Zellic OtterSec haxo.games HackTheBox TryHackMe Altered Security Google (Infra) RET2 Systems CTFguide OffSec Deloitte hex-rays Trail of Bits

Lexington Informatics Tournament CTF 2025 is a Jeopardy-style, beginner-friendly online CTF that's open to everyone. It is hosted by members of the LexMACS club from Lexington High School with the help of some amazing guest writers. You may form teams of up to 3 contestants! Sponsors: Infra sponsored by goo.gle/ctfsponsorship Non-Trivial Algoverse SPARC AoPS Texas Instruments RSM OtterSec X-Camp Trail of Bits Wolfram MIT Beaver Works Interview Cake .xyz Zulip For more information, visit our website at https://lit.lhsmathcs.org/ You can also join our Discord server https://discord.gg/k6yzFdZ

MaltaCTF is an international cybersecurity event organized by Friendly Maltese Citizens. The CTF features online preliminary rounds throughout 2025, with finals taking place alongside the MaltaCTF Conference held on-site in Valletta, Malta. Site: https://quals.2025.ctf.mt Discord: https://discord.gg/skM2YU8jC4 Proudly sponsored by: - Zellic - Ottersec Infra sponsored by goo.gle/ctfsponsorship

A monthly CTF hosted by MetaCTF and supported by Antisyphon Training, TCM Security, and Simply Cyber Academy. There will be 5 challenges, and you will have 2 hours to solve as many as you can. Participation is individual and free to enter.

Organisé par les étudiants de l'ESGI, le MindBreak c'est : ▶ Une compétition CTF la nuit par équipe de 1 à 4 ; ▶19h to 6h ▶ Formulaire d'inscription https://framaforms.org/inscription-pour-le-mindbreak-ctf-2025-sur-place-uniquement-1746438856 ⚠️CTF en présentiel uniquement, 242 rue du faubourg st antoine, 75012 Merci à nos sponsors et soutient - Hack The Box - I-Tracing - ESGI - BDE Sigma

Online jeopardy CTF (April 2026).

Join us for the first edition of jeopardy-style CTF organized by the Norske Nøkkelsnikere CTF team! There will be challenges in various categories such as web, misc, crypto, blockchain, devsecoops, rev, pwn, community-made and more! Everyone is welcome to join the CTF — beginners, students, intermediate players, and experts. Discord: https://discord.gg/9AZr3WKrjG Sponsors: OtterSec, EPT, River Security For onsite locations, please visit our discord server.

⚠️⚠️⚠️ Attention! The event time has been updated to: Sat, 05 July 2025, 08:00 – Mon, 07 July 2025, 20:00 (UTC+8) ⚠️⚠️⚠️ Welcome to No Hack No CTF 2025, organized by ICEDTEA, a passionate cybersecurity team from Taiwan dedicated to fostering learning and competition among cybersecurity enthusiasts worldwide. This event offers an exciting opportunity for participants to challenge themselves in a fair and competitive environment. Join our event for a thrilling 60-hour experience filled with challenges and learning opportunities. Whether you're a seasoned professional or new to cybersecurity, No Hack No CTF 2025 is the perfect place to test your skills and connect with the global cybersecurity community. Join our Discord server for assistance: https://discord.gg/7nvSsaUAQT Contact us at : nhnc@ic3dt3a.org

ATTENTION: CTF runs from 4th September 2025 08:30 AM UTC (10:30 AM CEST) to 5th September 2025 11:00 AM UTC (01:00 PM CEST) =========================== Nullcon Berlin HackIM 2025 CTF We welcome you to yet another installation of the Nullcon CTF. This is a primarily a conference CTF for Nullcon Berlin 2025, but online participation is also possible. There MIGHT/WILL be challenges that are only available on-site.

OWASP's annual European application security conference. Two days of training followed by three days of talks across AppSec engineering, threat modeling, secure SDLC and emerging AI/LLM security topics.

Free monthly meetup of the OWASP New York City chapter. Two short talks on application security followed by pizza and discussion.

PECAN+ is an Australian Capture The Flag (CTF) style cyber security competition for high school-aged competitors (yr 10-12). PECAN+ CTF is led by Edith Cowan University's School of Science as a collaborative initiative that brings together higher education institutions, cyber security industry, government, teachers and students around the aim of raising cyber security awareness, skills and aspirations. Thank you to our sponsors for their generous support of the 2025 competition: https://pecanplus.org/?page=sponsors

PH03N1X V1P3R N0V4 CTF a new ctf in town. A CTF with a twist. Because its aim is to teach rather than focus on competition side.The approach we’ll utilize is the following: during the 3 day competition at multiple points we’ll freeze the scoreboard, and well split the 40 teams in 2, so 20/20. Than say group A will have to teach or explain to group b a certain challenge randomly chosen. Now if group B manages to solve it they are still allowed to keep competing. If they don’t manage to solve it they won’t be allowed to continue the competition. This method encourages peer based learning. A physical presence unique event not only on the way the ctf takes place, but unique cause it's only one stage so no qualifiers. Event will contain embedded pwn(arduino pwn+ re),space hacking(kudos to EthosLabsLLC), mainframe hacking(special thanks to soldier of fortran), bomb defusal, normal pwn, web, crypto ,forensics, powerpc,ic(cmos) revese engineering, nday development, docker escape, and car hacking, ics&scada(shoutout i0.rs group), browser pwn. Event will be from 29-31 October, physically in Timisoara, Romania. Currently looking for sponsors, current sponsor: @fuzzysec prize sponsors: caido, metactf, cyberwarfare labs media sponsors&partners: i0.rs, uav.ro, cyberedu, defcon Cluj,calpyso heavy industries challenge sponsors: i0.rs, ethos labs, Alex Hornyai@ecsc team hungary, soldier of fortran,0xmard Should you wish to participate in the event, please fill the form(https://docs.google.com/forms/d/e/1FAIpQLSdKO7QZKdwNRuakt7WoYnb6Fzq1Jxrx6fI8r8gJtdXDFkJRRA/viewform?usp=dialog) and join the discord . Please fill it only if you consider attending it very seriously ! If any problems should arise while filling in the form please reach @f00fc7c800 on twitter!

Long-running CMU jeopardy CTF hosted by Plaid Parliament of Pwning (PPP).

Annual jeopardy CTF hosted by CMU's Plaid Parliament of Pwning (PPP).

Zero Day Initiative's contest targeting consumer devices: phones, printers, NAS, routers and smart speakers. Cash payouts for full exploit chains demonstrated live.

R3CTF 2025 is a online jeopardy-style CTF organized by r3kapig. Categories: Pwn, Web, Crypto, Reverse, Blockchain, Misc. Forensics and etc.... Sponsors: Gold sponsors: OtterSec (https://osec.io/) && Offside Labs (https://offside.io/) (Listed in no particular order) Infra sponsored by goo.gle/ctfsponsorship Support channel -> https://discord.gg/zU64ekBsgA

The First Ever Singapore Student Merger CTF is Here! SSMCTF is a 36 hour beginner-friendly Capture the Flag competition made for students. There are 8 exciting categories — including a Beginner track to help you get started! You may form teams of up to 4 and register by 13th June to compete! Sponsored by Cyber Cohesion and OffSec

We invite you to participate in an exciting 4-hours Capture The Flag (CTF) Hacking competition in the beautiful island of Bali. This event is designed to be beginner friendly while still offering plenty of challenges for more experienced participants. Through a series of engaging, real-world cybersecurity challenges, you’ll gain practical experience, learn new techniques, and connect with like-minded individuals who share your passion for technology and cyber security. Participants will face tasks across categories such as Web Exploitation, Reverse Engineering, Binary Exploitation, OSINT, and even AI-related challenges. Each challenge is carefully crafted to test your problem-solving skills, critical thinking, and cybersecurity knowledge. This competition is hosted by PT Sawah Cyber Security as part of our initiative to promote cybersecurity awareness in Indonesia. We aim to bridge academic and professional communities by encouraging ethical hacking practices and industry-level skills. The event is open to universities, private companies, and independent participants alike, to grow interest and capabilities in the cybersecurity field.

The US Cyber Games program is hosting its Season V, US Cyber Open Beginner's Game Room CTF. The Beginner's Game Room is the entry-level component of the US Cyber Open and a great place to solve your first-ever challenge(s), or warm up for more of a challenge in our Season V, US Cyber Open Competitive CTF.

The US Cyber Games program is hosting its Season V, US Cyber Open Competitive CTF. The Competitive CTF is for those ready to put their knowledge and skills to the test. Challenges will range from intermediate to advanced in difficulty, and all challenges will be delivered via CTF-d.

SekaiCTF returns for its fourth edition! While the overall difficulty has been designed to suit intermediate and advanced participants, we've also included beginner-friendly tasks to ensure newer players can join in and enjoy the experience. SekaiCTF 2025 will serve as dual prequalifier for MaltaCTF 2025 Finals and the 10th XCTF Finals. Discord: https://discord.gg/6gk7jhCgGX [+] Prize Pool ・USD $10,000 in cash and over $15,000 worth of prizes ・The top two teams will earn qualification for the following onsite events: ​ ​ ​ ​ ​ ​ ​ ​・The 10th XCTF Finals in China (2026): https://adworld.xctf.org.cn/ ​ ​ ​ ​ ​ ​ ​ ​・The inaugural MaltaCTF Finals in Valletta, Malta (2025): https://2025.ctf.mt/ ※ The first-place team may choose their preferred event; second-place team will qualify for the other. XCTF Finals covers full flights and accommodation; MaltaCTF Finals covers €450 per person for flights and full accommodation. [+] Sponsors ・OtterSec (https://osec.io/) ・Zellic (https://www.zellic.io/) ・Trail of Bits (https://www.trailofbits.com/) ・Sec3 (https://www.sec3.dev/) ・Vector 35 / Binary Ninja (https://binary.ninja/) ・Hack The Box (https://www.hackthebox.com/) [+] Partners ・Google Cloud (https://cloud.google.com/) ・XCTF League ・Friendly Maltese Citizens

A Jeopardy style online Capture The Flag competition to upbring and promote women in the industry. It's a beginner friendly CTF. Discord : https://discord.gg/hH7WXcgsXk The CTF will include following categories:- Web Reverse Pwn DFIR Crypto Box Android Misc/Osint

In the retro kingdom of SegFaultia, chaos has erupted. The dastardly Heap Hopper, a rogue programmer turned villain, has kidnapped Princess Pomegrante and locked her away in the infamous Stack Dungeon, a fortress built entirely of corrupted memory stacks and unstable code. The kingdom’s last hope is Super Jumpio, a daring, mustachioed hero known for his incredible leaps and unmatched debugging skills. Armed with his Binary Boots and trusty Debugger Hat, Super Jumpio must navigate through levels of vulnerable code, leaping over buffer overflows, smashing through bad pointers, and outwitting Heap Hopper’s dynamic linker traps. To prevail, Super Jumpio must jump, debug, and smash his way to victory, rescuing the Princess and restoring stability to SegFaultia!

STARPWN CTF 2025 A Capture the Flag competition at DEF CON 33 hosted by the Aerospace Village Our goal is to bring together hackers from around the globe to work on space related challenges. From easy to hard challenges, it should have something for all skills levels. Join us on this journey through the stars! Are you up for the challenge? Register your team now! https://app.metactf.com/starpwn-2025 Starts at 0900 on 8/8, End at 1200 on 8/9 (PDT) Available online for everyone to join, but you can also drop by the Aerospace Village to find this and much more! Brought to you by: Aerospace Village Ethos Labs Visionspace Sixgen Cal Poly - California Cybersecurity Institute MetaCTF

Toronto's longest-running security meetup. Monthly evening talks from local practitioners followed by drinks. Free to attend.

This year, The Few Chosen are thrilled to host our fifth annual Capture The Flag (CTF) event, set to take place from August 29th to 31st, 2025. We, a committed team of cyber enthusiasts who've cut our teeth on countless CTFs, are channelling our passion for cybersecurity into curating this unique, immersive CTF experience. We've meticulously engineered the event's website from scratch, ensuring a seamless and enriching user experience. Our diverse set of challenges spans Pwn, Reverse, Web, Crypto, and Misc. Mark your calendars for a uniquely immersive cybersecurity adventure. The Few Chosen CTF 2025: The perfect platform for honing skills, fueling passions, and embracing the cybersecurity community. https://discord.gg/nVYv3mHKUf Sponsors: Google OffSec CyberEDU OtterSec Zellic HackTheBox Partners: Orange Romania Infra sponsored by goo.gle/ctfsponsorship

TJCTF is an international cybersecurity competition hosted by TJ Computer Security Club (TJCSC), a group of students from Thomas Jefferson High School for Science and Technology in Northern Virginia. Prizes are sponsored by Trail of Bits and Zellic. Twitter: https://twitter.com/tjctf Email: contact@tjctf.org Discord: https://discord.gg/w5xapGP Competition is online.

Welcome to ToH CTF 2025! We are Tower of Hanoi, a CTF team based in Milan, founded back in 2004. You might remember us from past events such as poliCTF, last hosted in 2017. Now we're back, bringing you an exciting event for all skill levels and interests. This year's competition includes challenges across the main categories: Pwn, Rev, Web, Crypto, and Misc. Are you up for the challenge? Register your team now! https://2025.ctf.towerofhanoi.it/ Discord: https://discord.gg/Efq5xRagj6 Infra sponsored by goo.gle/ctfsponsorship

University of Illinois student-run jeopardy CTF (SIGPwny).

UIUCTF is an annual capture-the-flag competition hosted by SIGPwny, the cybersecurity club at the University of Illinois Urbana-Champaign (UIUC).

SIGPwny UIUCTF — spring 2026 edition (scheduled).

University of Toronto student CTF (January 2026).

Get ready to hack! The CTF is back at WHY2025! Brought to you by the same team behind the legendary CTFs at OHM2013, SHA2017, and MCH2022. After a well-earned break, we’re back—bigger, better, and more challenging than ever! Just like in 2022, we will have both online and on-site challenges, making the CTF accessible to everyone. Whether you’re a seasoned hacker or a total beginner, there’s a challenge waiting for you. For event info go to https://why2025.org/

UWaterloo's Cybersecurity Club brings you a jeopardy-style online CTF, open to all! Primarily aimed at beginner-to-medium level, but with some hard challenges to test the most skilled as well.

Hack, solve, and conquer — a CTF designed to challenge minds of all levels. World Wide Flags is back this year with World Wide CTF 2025! More Prizes, More Categories, and Much More Fun! We are planning to have this year the following categories: - Reverse - Web - Crypto - Pwn - OSINT - Forensics - Web3 - Jail and more! Join the official discord for updates: https://discord.gg/guwaGy3ftN This CTF wouldn't be possible without the support of our sponsors! <b>Gold Sponsor:</b> Kaspersky <b>Silver Sponsors:</b> Caido Parrot CTFs Zellic OtterSec <b>Prize Sponsors:</b> NordVPN NordProtect NordPass Incogni Saily CyberWarFare Labs Altered Security LetsDefend OffSec Infra sponsored by <a href="https://goo.gle/ctfsponsorship" rel="nofollow">goo.gle/ctfsponsorship</a>

Team bi0s invites you to our prestigious bi0sCTF 2025, a premier hacking event designed for hackers of all generations. We are dedicated to crafting challenges that incorporate the latest vulnerabilities, responsibly pushing the boundaries of innovation to ensure a delightful and enriching experience for all participants. Stay tuned for official updates by following us on https://twitter.com/teambi0s. Prizes: 1st place - $1500 2nd place - $1000 3rd place - $500 + $300 Writeup prizes!

Organized by the Crusaders of Rust (a.k.a. Starrust Crusaders), an American and European security research organization. Infra sponsored by <a href="https://goo.gle/ctfsponsorship">goo.gle/ctfsponsorship</a> Prizes sponsored by OtterSec, RET2 Systems, Trail of Bits, Binary Ninja, and Research Innovations.

A CTF by a friendly team of farmers. Includes challenges of the following categories: - pwn - reverse - crypto - web - misc Official writeups are available at https://github.com/pwnlentoni/cornCTF-2025-public

Latin America's largest security conference. Spanish/English program, an extensive village floor and a wildly fun social scene in Buenos Aires.

7th Edition of Hackcon, the flagship CTF by team d4rkc0de as a part of ESYA 2025 HackCon is a jeopardy style competition that includes challenges in the domain of Reverse Engineering, Web Exploitation, Clever Scripting, and general "hacks". There is a flag associated with each level. To successfully complete the level you have to get the flag and submit.

The fourth iteration of idekCTF! join our discord server: https://discord.gg/UDvQyHF42a NOTE: The CTF will be starting 8 hours later than shown on ctftime.

A 2025 justCTF jeopardy competition is coming! Sponsors: - Trail of Bits - OtterSec - Zellic - HexRays

Spring 2024 edition of picoCTF.

Spring 2025 edition of Carnegie Mellon's educational CTF for students worldwide.

scriptCTF is a 48-hour jeopardy style CTF for hackers to test their skills against creative and innovative CTF challenges. We have mostly beginner friendly challenges, with a few hard ones. scriptCTF makes CTFs fun and approachable for all skill levels! This is hosted by ScriptSorcerers and some members of n00bzUnit3d (as a replacement of n00bzCTF). Team Limit: 4 members Discord: https://discord.gg/c9xaJFW449

The first ever CTF hosted by .;,;. (also known as smiley), America's #1 CTF team*! *in 2024, according to CTFtime Join our Discord: https://discord.gg/agpgGW372M ## Categories: Cryptography, pwn, reverse engineering, web exploitation, blockchain, miscellaneous. ## Sponsors: OtterSec - osec.io Zellic - zellic.io Veria Labs - verialabs.com Infra sponsored by goo.gle/ctfsponsorship

SnakeCTF is an online jeopardy-style CTF featuring challenges from many categories, including pwn, web, reversing, crypto, forensics and network. This event serves as a qualification for the Finals. We will invite top teams to the Finals, which will be held on-site (Italy) in November/December 2025. Infra sponsored by goo.gle/ctfsponsorship

Beginner-friendly platform with bite-sized challenges across the standard CTF categories.

Crypto-focused platform with theory and challenges grouped by primitive: RSA, ECC, AES, hashing, lattices, post-quantum.

Online platform with thousands of machines, challenges, and the Pro Labs / Endgames campaigns.

Structured cybersecurity courses with hands-on labs, from Linux Fundamentals to advanced Active Directory paths.

Free web hacking course and CTF run by HackerOne. Completing flags can earn invitations to private bug bounty programs.

Wargames teaching Unix, networking and security concepts level by level (Bandit, Natas, Leviathan, Narnia, Krypton…).

Free web security training from the makers of Burp Suite: deep coverage of SQLi, XSS, SSRF, auth, race conditions, prototype pollution, etc.

French CTF platform with hundreds of challenges across web, crypto, forensics, reversing, network and more.

Browser-based rooms covering offensive and defensive security, from intro to advanced.

Library of downloadable vulnerable VMs (Kioptrix, Mr. Robot, DC series…) for offline boot-to-root practice.

Free educational CTF run by Carnegie Mellon. The picoGym hosts every past challenge.

ASU course covering binary exploitation, kernel exploitation and reverse engineering with a dojo-based progression.

Classic PHP/MySQL training app exposing OWASP Top 10 issues at four security levels (Low, Medium, High, Impossible).

Modern JS-stack vulnerable web application covering every major web vulnerability class, gamified via a Score Board.

Free, open-source vulnerable web app for learning OWASP Top 10 attacks with hints and per-level difficulty.

Java-based deliberately insecure application with guided lessons across web security topics.

Buggy Web Application — PHP+MySQL training target with 100+ deliberately introduced vulnerabilities.