Practice CTF List / Permanant CTF List

Here’s a list of some CTF practice sites and tools or CTFs that are long-running. Thanks, RSnake for starting the original that this is based on. If you have any corrections or suggestions, feel free to email ctf at the domain psifertex with a dot com tld.
Whether they’re being updated, contain high quality challenges, or just have a lot of depth, these are probably where you want to spend the most time.

Others Some good concepts, but “canned” vulnerabilities (string matching on input) will frustrate knowledgable hackers and teach newbies the wrong lessons

Meta (excellent list of challenge sites) (good CTF wiki, though focused on CCDC) (great archive of recent CTFs)

Webapp Specific

Forensics Specific


Paid Training

Damn Vulnerable Web App
Stanford SecureBench
Stanford SecureBench Micro
Damn Vulnerable Linux (not currently live? local mirror)

Inactive or Gone
Just around for historical sake, or on the off-chance they come back.
WebMaven (Buggy Bank) (Russian)


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s