What is a CTF?
A capture-the-flag (CTF) is a cybersecurity game. Each challenge hides a secret string called a flag, and you use real security skills to find it. Submit the flag and you score the points.
How this CTF works
- Pick a challenge. You can read every challenge without an account.
- Work on it: read the description, download its files or connect to its live service.
- Find the flag. It looks like flag{…}.
- Sign in with Google or GitHub and submit it. The points go straight onto the public leaderboard.
Types of challenge
CTF challenges usually fall into a few categories. Each trains a different skill.
Web
Find and exploit flaws in a running website, such as injection or broken access control.
Forensics
Dig through files, disk images or network captures to recover what is hidden in them.
Crypto
Break weak or badly used encryption to read a secret message.
Reversing
Take a compiled program apart to work out what it does.
Pwn
Exploit a memory bug in a program to take control of it on a remote server.
Common questions
Is this CTF free?
Yes. Every challenge is free to play, and there is nothing to pay for.
Do I need an account?
Not to read the challenges. You need one to submit flags and appear on the leaderboard, and you sign in with a Google or GitHub account, so there is no new password.
Can a beginner play?
Yes. Each challenge shows its difficulty, so start with the easy ones. Most have hints to point you in the right direction.
Do hints cost points?
No. Hints are free, so open them whenever you are stuck.
What do I need to play?
A web browser is enough to start. Some challenges also ask you to use tools on your own computer, such as a terminal to connect to a live service.
When does it end?
It does not. The CTF is always open, so you can play at your own pace, and new challenges are added over time.
What is first blood?
First blood is the honour of being the first person to solve a challenge. It is shown on the challenge and on your profile.
How does the leaderboard rank players?
By total score, highest first. When two players have the same score, the one who reached it first ranks higher.
How many guesses do I get?
As many as you like, up to five a minute on each challenge. The limit is there to stop people guessing by script.
Rules
- Only attack the targets a challenge gives you. This website, its accounts and its servers are not part of the game.
- Do not attack other players or try to access their accounts.
- Keep the flags to yourself, so others can enjoy solving them.
- Play with one account.
Found a real bug?
If you find a real security problem in this site, please do not exploit it. Email it instead: ahmedeleuch525@gmail.com
Who runs this
This CTF is a personal project by Ahmed El Euch. Read the privacy policy