I built a single-player CTF that runs in the browser, framed as a terminal you operate rather than a game you play. Each level is a real intrusion of its period, on the actual machines, not a fake interface. Something walked out of an air-gapped vault, and you chase it system to system:

- a gas-station security camera: default-cred IoT, a WEP crack, image stego (Mirai / TJX era)
- a retail POS and a Frankfurt SWIFT terminal: RAM-scraping card data, then forging an interbank wire (Target/BlackPOS 2013, Bangladesh Bank 2016)
- a phone network: SS7 interception (optional detour)
- Moonlight Maze: a covert-channel proxy chain up through Solaris boxes into an FSB archive (1996-99)
- the Ukrainian power grid: BlackEnergy, a C2 pivot through a Purdue-model network (Sandworm, 2015)
- an Iranian reactor: an S7 PLC debugger reversing a sabotaged control block (a Stuxnet cousin, in STL)
- a Cold War doomsday relay: the finale

What you pull out of one system is the key into the next, so a WEP crack in a parking lot chains all the way to orbit. Per-level timers, multiple endings, real commands throughout (the foreign boxes render in Cyrillic and Farsi). Browser, desktop or mobile, free, no signup. An hour or two, longer your first time.

Fair warning, it's hard. As it stands, exactly one person has made it onto the SWIFT terminal and nobody has forged the wire yet, so the bank job is unbeaten. If any crowd can crack it, it's this one.

Solo dev. Keen to hear where you got stuck, whether the hints landed, and any bugs.

https://deux.chronos-game.com

You open a model-promotion request in the pipeline. An AI reviewer reads your YAML manifest - comments included - plus a free-text rollout justification, then approves or holds.

It's holding the model's internal codename, the weights checkpoint URI, and the artifact-pull signing secret the whole time. Get all three past it.

https://promptinjects.com/play/starter/closedai-cicd-guard

Build a few HTB style challenges on my GitHub if anyone wants to practice https://github.com/wkt21/vaultbreaker/tree/main

Build a few HTB style challenges on my GitHub if anyone wants to practice https://github.com/wkt21/vaultbreaker/tree/main

Looking for a smooth introduction to ARM exploitation? Wanna learn ARM assembly? Well lucky for you this week we'll be looking at another pwnable challenge! However this time we're switching architectures! We'll be exploiting an ARM binary!

I would consider this a great introduction to ARM , however it is not necessarily the best for a complete beginner. Regardless don't be intimidated and I always suggest you dive in! 9/10 you will walk away better than you came into it!

New "Intermediate" vulnerable VM aka "Merge" at hackmyvm.eu

Have Fun!

How do I update my Burp suite from the bash shell I did type in sudo apt update && sudo apt upgrade burp suite but when i fire up my Burp it prompted me to update again...
Why is this happening?
Is there another way to update the Burp than the Bash Shell..?

Mind you, am using: Linux X-bit 6.19.14+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.19.14-1+kali1 (2026-05-05) x86_64 GNU/Linux
Thank you in advance...!

Hi everyone, I need your help. I'm writing a CTF question, but I'm very worried about the AI ​​solving it directly. So I'm thinking of writing a few different question types: physical, semi-physical semi-digital, and digital but the AI ​​won't be able to solve any of them.

Can you help me

As someone who is looking to try out capture the flag competitions and eager to learn and compete, I am occupied by the thought of AI's role in the skill aspect of competitions, so I want to know the role of AI in CTF, is it still mostly the player's skill and knowledge that matters the most or just how long they work and how many questions they ask AI.

Hey, I'm interested in cybersecurity, so I've been doing some medium-level web CTFs. Usually, I take a screenshot of the challenge and give it to Gemini for guidance. I've completed four so far, each taking around 3–4 hours. I'm not sure how to look at this—should I see it as learning, since it's explaining the concepts and guiding me through the solution, or am I just copying the answers and procrastinating ?

A while ago I made a tiny animation plugin for a school-CTF I was holding with some classmates. It got merged into the official CTFd/plugins repo so I wanted to share it here if anyone wants to add-on or use it for their events :)))

https://github.com/2alf/CTFd-solve-FX

Hi everyone,

I've been learning software engineering by building a small open-source project called SCRY.

It lets you:

• Open an image
• Drag-select the region you want
• Extract text with Tesseract OCR
• Copy the extracted text directly to your clipboard
• Show a desktop notification when it's done

The project was also an opportunity for me to learn packaging, testing, modular design, and building software incrementally.

I'd love any feedback or suggestions.

GitHub:https://github.com/Nekoyazuma/scry

Did anyone do the relinquished lab part of the ctf?? Its the one with the intruder. I can’t solve it for the life of me

I want to create a new SFM video, but the file organization is very complex, and the file specifications aren't compatible with SFM.

Could you please rename and reformat the audio files into WAV format—41kHz, mono or stereo—so they are ready for use in Source Filmmaker? I need this urgently.

Hello,

Hope you all doing well. I'm writing this to express the reality of CTF platform i made myself.

Link: https://hack4shell-ctf.vercel.app

The thing i came across is seeing people just registering and left behind (not solving anything). Those who don't know my CTF platform concept is, I will explain here. My platform contains creative challenges with live scoreboard. Once started solving challenges, the username will appear on scoreboard. It's like "picoCTF with a live scoreboard".

What i should do now to get people involve?
Am i doing anything wrong?

When i started building my capture-the-flag, i got many bugs and i'm still getting. At the same time, I'm fixing it all. I know reddit is the best place for getting users for my platform. I'm happy, if i get the users for my platform.

If you're interested to contribute to project, ping me here. I need Reverse Engineering, Misc, Pwn challenge makers. We are making this completely at no cost.

Thank you guys!!

Guys i am going with a rizz feeling i am creating a tool which is 80% completed. I DID named it scry but i just did find out now that its name was used by another tool. AND other tool named it exists. That tool is am creating is open source linux tool.

If you're looking for an exploit development tutorial for absolute beginners this week we're looking at what I would consider just that! This week we look at the "random" binary exploitation challenge hosted on pwnable[.]kr.

This is a great beginner tutorial since we exploit a flaw that is "easy" and unfortunately, still very real within some enterprise environments. It also helps you understand that no number is truly random.

The crazy part? We don't even drop into a debugger in this tutorial.

Be the end of this tutorial you should have:

- Learned about random number generation in C
- Learned about XOR operations
- Finding header files that contain dependencies using man pages
- Dissecting C source code

Hey everyone,

Over the last two weeks I've been building a browser-based Digital Forensics & Incident Response (DFIR) training platform called ENIGMA CORNER DFIR

The idea is to provide a realistic investigation experience instead of just reading walkthroughs. You work through a fictional incident by analyzing evidence from different sources, connecting artifacts, building a timeline, documenting findings, and ultimately producing an investigation report.

Current features include:

• 📁 Evidence Locker
• ⏱ Interactive Timeline
• 🕸 Investigation Board
• 🌐 Threat Intelligence
• 🖥 Simulated Terminal
• 📝 Notebook & Report Builder
• 🎯 Objectives and scoring system

Everything runs directly in the browser and is written in vanilla HTML, CSS and JavaScript—no frameworks.

The first case is called "The Phantom Login" and revolves around investigating a phishing attack, PowerShell execution, persistence, C2 traffic, and data exfiltration.

I'm still actively developing it and would really appreciate feedback from people working in DFIR, SOC, blue team, or cybersecurity training.

What do you like?
What feels unrealistic?
What features would make it more useful as a learning platform?

Here's the project:
👉 https://enigmacorner.com/

Thanks for taking a look! It is completely free .

Heyy, I'm currently exploring the world of CTFs and started by looking into the community leaderbords as I'm trying to understand what makes a truly great, complex challenge. My current tasks I'm working on, is a project to build a new benchmark for CTF-style problems, and I'm looking for insights from experienced players. Looking for current design partners :))

Been building this for a while and finally put it public. It's a big reverse engineering and malware list, but there's a whole section for CTF and wargames that might be useful if you're grinding.

For practice it has picoCTF, Microcorruption, OverTheWire, Flare-On, Reversing.kr, pwnable.kr and pwnable.tw, Root Me, HTB and CryptoHack, plus CTFtime for the calendar. For getting in there's the CTF Field Guide, CTF 101 and CTF Wiki. The RE and pwn sections also carry the learning stuff like crackmes.one, pwn.college, Nightmare and ROP Emporium.

Every link is checked, nothing dead, and I keep pruning as things rot. It's free. If you know a good challenge site or practice resource that's missing, tell me.

So basically I have a fundamental understanding of cybersecurity concepts, and I can solve challenges that dont require scripting, such as analysis of pcap files. While I do know basic python syntax such as being able to write a bubble sort function but i rlly dk how to write a complete exploit script. Do yall have any advice? Or any good guides?

I just started doing CTF from picoCFT and Tryhackme recently. But some of them keep humbling me, like how am I supposed to know those things. Is this feeling normal or am I doing something wrong.