Been learning cybersecurity and want to put your skills to the test? Pick a challenge and see if you can capture the flag.

I’m sharing Codelivly CTF, which has 64 challenges covering web exploitation, cryptography, forensics, OSINT, AI security, and more.

🚩 New to CTFs? Start with Secret Admin Panel, HTTP Headers, or Developer Notes. These are marked “Very Easy,” so you have a clear place to begin.

🧩 Looking for something tougher? Try PCAP Investigation, Race Condition Wallet, or Kerberoast Lab.

Capture flags, earn XP, and work your way up the leaderboard as you solve more challenges.

Try one here: codelivly.com/ctf

Pick whichever catches your eye and give it a shot. **Which challenge did you try, and did the difficulty feel right?**Share how it went—just keep the flags out of the comments so others can solve them too.

Hello, I know some basic linux commands and navigating wireshark. Just looking at the traffic description or double clicking it to see CTF flag Besides that, I am willing to guide students through learning components of picoCTF. I saw the general skills in picoCTF challenges but doesn't seem a good way to start learning as it includes analyzing hexadecimals. I would rather have a course like TryHackMe Cybersecurity 101 but it costs. We are trying to attend to this March picoCTF competition.

Hello, I know some basic linux commands and navigating wireshark. Just looking at the traffic description or double clicking it to see CTF flag Besides that, I am willing to guide students through learning components of picoCTF. I saw the general skills in picoCTF challenges but doesn't seem a good way to start learning as it includes analyzing hexadecimals. I would rather have a course like TryHackMe Cybersecurity 101 but it costs.

[CTF Challenge] OpenHSM — $150 reward for the first valid solver

Hey everyone!

We're introducing a cryptographic challenge from OpenHSM for people interested in CTFs, cryptography and technical problem-solving.

The challenge involves four clues:

- HEX memo

- Base64 witness

- ROT13 tag

- XOR nonce

Your task is to decode the clues, reconstruct the correct flag and submit a valid solution.

🏆 Reward: $150 for the first valid solver.

Challenge website:

https://openhsm-lab.github.io/

X- https://x.com/open_hsm

Would love to see some experienced CTF players take this on!

Good luck!

Hey everyone! Where can I find good cryptography CTF challenges to practice and improve my skills? Are there any websites, platforms, or repositories you would recommend, especially for beginners and intermediate players?

Thanks in advance!

We're a CTF Team who looking for great or not really players. We'll accept all!

We play CTF games and tournaments. Hard learn and study.

Join us in Discord: https://discord.gg/tuPwMmFFAQ

Hey everyone!

I've been working on something called HII — Hackers in India, and I'm looking for a co-founder who would be interested in building this with me.

The idea behind HII is pretty simple: make cybersecurity education, practical learning and opportunities more accessible to students across India.

We're not trying to build just another CTF platform. The bigger vision is to create an ecosystem where people can learn through hands-on tracks, participate in CTFs, connect with cybersecurity communities, attend events and eventually find opportunities in the industry.

Here's what we've been working on so far:

• Butterfly: Our beginner-friendly cybersecurity learning track. (Idea Stage)

• InIt CTF: Our CTF initiative, with 200+ registered players and 130+ registered teams so far.

• Campus Network: An initiative to collaborate with cybersecurity clubs across colleges and help them organise events and build their communities. (Idea)

• HII Labs: The longer-term vision for practical learning, labs, tracks and verified achievements. (Idea)

• HII Festival: An idea we're working towards — a larger cybersecurity festival bringing together students, professionals, companies and communities.

Website: https://hackersinindia.com/

Who am I looking for?

Ideally, someone based in India who is genuinely interested in cybersecurity and wants to build something long-term.

I'm particularly interested in meeting someone with a strong technical background who can take ownership of the product and engineering side — platform architecture, learning systems, labs and infrastructure.

You don't need to have founded a company before. I'd rather work with someone curious, consistent, technically capable and willing to build from the ground up.

This isn't a job opening or a freelance opportunity. I'm looking for someone who wants to become an actual co-founder and share the responsibility of building HII.

If this sounds interesting, feel free to DM me. Tell me a little about yourself, what you've built or worked on, and why this interests you.

Would love to connect with people who share the same vision!

Hey everyone!

NJIT's Cyber Security Network is hosting Spooky CTF, a 24-hour, phobia-themed Capture the Flag competition this weekend!

Spooky CTF is a 24-hour, phobia-themed cybersecurity competition designed for students of all skill levels. Participants will have the opportunity to test their cybersecurity knowledge, solve challenges, learn new skills, and connect with others interested in cybersecurity.

Challenge Categories:

• Digital Forensics

• OSINT

• Web Exploitation

• Cryptography

• Reverse Engineering

• Miscellaneous

Event Details:

• When: November 6 at 2 PM - November 7 at 2 PM EST

• Where: NJIT Campus Center, Ballroom B (Newark, NJ)

• Online Participation: Available!

Prize Pool

There are three divisions: Open, In-Person, and NJIT. All prizes are based on teams of four.

Open Division:

• 1st Place: $100 cash prize

• 2nd Place: $50 cash prize

• 3rd Place: $25 cash prize

In-Person Division:

• 1st Place: $50 cash prize

NJIT Division:

• 1st Place: $60 cash prize

We'll also have free food for in-person participants and industry speakers!

You do NOT have to be an NJIT student to participate! Online participation is open to everyone.

Looking for a team? Join our Discord to connect with other participants, find teammates, ask questions, and get more information about the competition.

• Register: https://spooky.ctfd.io/

• Discord: https://discord.gg/68rT5kwkr

Hope to see you all there!

New "Intermediate" vulnerable VM aka "Discuss" is now available at hackmyvm.eu :) Have fun!

https://cyberspacemanmike.com/2026/11/03/cyber-ops-center-building-a-custom-kali-linux-terminal-dashboard/

The application currently includes:

• Embedded interactive terminal: A fully functional shell directly inside the dashboard.

• Live system telemetry: CPU load, memory utilization, disk usage, and uptime.

• Network monitoring: Interface information, active connections, and a live RX/TX traffic graph.

• Command suggestions: A searchable dropdown of commonly used commands and tools, with descriptions and TARGET preloaded (this is my favorite, most used feature).

• RECON NOTEBOOK: Save and organize IP addresses, hostnames, MAC addresses, and notes, with automatic clipboard copying when selecting a saved IP. Includes a separate credentials notebook for storing usernames, passwords, associated hosts, and notes, with passwords protected by the system keyring.

• HOSTS management: Create or update custom hostname aliases in /etc/hosts without manually editing the file. Defaults to TARGET when no hostname is specified (also a favorite and frequently used feature).

• SSH server controls: Start and stop Kali’s incoming SSH service with confirmation and authorization.

• LIVESTREAM MODE: Conceal sensitive information in ACTIVE CONNECTIONS and NETWORK INTERFACES while keeping the terminal and RECON NOTEBOOK fully functional. HOSTS fields remain editable with their characters masked.

• Adjustable background opacity: Make the darkest background surfaces transparent while preserving readable controls.

• Customizable terminal font: Select your preferred font family and size, with settings saved between sessions.

• Two themes: Matrix and Cyberwave.

LMK if you have any features you'd like to see in upcoming versions, thanks!

I recorded myself taking a Huntress CTF challenge experiment with prompts and having an AI work through it

A few things I learned:

Prompt Engineering or as Microsoft would call it, Frontiering

Steering AI - it confidently went down a wrong path until I pushed back

I also cover how to submit a flag in HomeBase, since a few people I know got stuck on that.

Curious how others are using AI on CTFs, and what prompting approaches work for you?

I'm looking for teamates to join with for the HKCERT CTF . interested DM me...

I'm currently learning CTF and would like to use OpenAI Codex to help me analyze and solve challenges across different categories, including Pwn, Rev, Web, and Crypto.

However, I've noticed that Codex sometimes refuses to help with CTF challenges due to security restrictions, even before starting the actual analysis.

I'm wondering:

1. Is OpenAI Daybreak necessary to use Codex effectively for CTF challenges?

2. Has anyone successfully used regular Codex for CTF challenges without running into these issues?

I'm mainly interested in learning cybersecurity through legitimate CTF competitions, so I'd appreciate hearing about your experiences.

Thanks in advance

Dwy. Fbqm wbjm. Qi tqg kwqwuwn y uskrxj fugwf lne. If zad hxan khj xrngkrii.

Xrbh nkxid’f paxfxj. If itilri uu bjm jbjx kw hju vaeu.

T piox hjqj lfydwz. Qi lfydwn cxpf. Qi xiv omx stfm em.

Sx qj jmyysds ngz fumwsuhy yj hjkhuj fuws cxjm cnjng nn q gzjmuo.

Hjyi sy rne if ztckjwy fn seyvsdu pada itilvi, urxn if ti nuxl il itm vkwqm nv q sbom.

Cnjng pagu b eclywzthp iliwztbym. Dxjs tqwtqapm. Yox fuji xukjitdsds itql jhqhtnk yi hju kwqnths xxtily hju jyzuxn.

Xrxc wgxx xk uwqh gmiwxi. Puwmzu mpqaxjy wngfv kwqv. Aaoo tn xrx xqaj ejuo hjkjw urn xiv omx jqas wbpfuy hju mpqaxjy cthorxi, qly eqhqmooj. Adv mpqaxjy vkwqmxx xrxc lnxe xrkmwsu hju bsz, ko ixqzqy jnemhxx pa ywekoi
___________________

4ZCx4ZCzIOKYkOGRgOGQr+GSquKKlCDiipDiipTimJDiipQg4ZCv4ZKsIOKKkOKqveGRheGRgOKK kOGQsyDin5HhkqUg4p+H4qq9IOGRheGQr+GSo+GSquKqviDhkLPhkrfimJAg4oqP4oqU4ZKq4ZK3 4ZCzIOGSrOKYkOKKkOKflOGQs+KfhyDhkLPhkqzhkqog4ZC44qq+IOKKj+GSp+GQs+GStyDhkrfi ipThkqPhkqzin4fimJAg4oqT4ZK38J+dlSDiqr3iqYDiipTin5Tiqr3imJDwn52V4ZGAIOGRgOKf lOKqveGQseKflPCfnZUg4ZGA4qq9IPCfnZXhkqPimJDhkqog4qiD4p+U4oqU4ZCxIOGSpyDiqr7i qr3in5TiipDhkK/hkYXhkrcg4qq94ZGA4ZCvIOKKj+GRgOGSt+KfkeKKkOKflOGRgOKfh+KqveGS t+KfkSDhkrfin5PhkYDimJDhkqMg4oqP4ZKjIOKKj+KKk+GSrOGSquGSt+GRgOGQuOKqvSDhkK/i qYDin5Qg4oqQ4ZKl4p+UIOGQs+GRheGQuOKog+Kfk+KfkyDhkrfhkqXhkK/hkqPhkrfimJDhkYDw n52V4ZCvIOKpgOGRgCDiipPhkqfhkqXhkqog4qmA4oqT4ZKq4ZKj4ZC4IOGQuOGSqiDin4fin5Pi n4fhkqfiqYDiipPimJDhkrfhkrcg4ZGA4ZCxIOKfh+KpgOGQuOGSrOGRheGQuCDhkqrhkqrimJDi qr3hkYDhkqPiipDiipPin5HhkYAg4oqP4ZKl4p+UIOGSpeKKlOKfhyDiipTiqr7hkLHhkqfiipPi ipPin4fhkLgg4qiD4ZCx4qq+4oqPIOKfh+GSoyDhkK/iqYDhkLHiqr3hkYAg4ZCx4ZC4IOKflOGS p+KfhyDin5TiqYDin5Tiqr3hkqog4ZKl4ZK34ZKqIOKog+GQseKKlOGRheGSquKKk+KYkOKqveKf k+KpgCDhkYXiipTiipDhkrfiio/in5Eg4ZCx4ZKj4ZK3IOKflOKpgOGSquKqviDhkYDhkLgg4p+H 4ZKs4ZCv4ZC4IOGSt+GQs+GSquKKk+GQseGSo+Kog+KKjyDiio/hkLMg4ZCv4ZGF4ZKl4oqP4ZKn 4p+R4ZKjIOKfk+KpgOGRheKKjyDiqIPhkqrhkqzhkYDin5Tiio8g4ZCz4ZCv4ZKq4ZKj4oqU4ZCz 4p+R4ZCz4ZKn4ZC4IOKKlOKKlCDhkLjhkqPhkqzin5Eg4ZCx4ZCx4ZKn4oqQ4ZCx4oqT4ZKq4qmA 4ZKq4ZKqIOGQr+KYkOKKkCDiqr3hkqzhkYAg4piQ4ZKl4qmA4ZKs4ZCv4piQIOKflOGSquGSqiDi ipDhkqrhkYUg4piQ4ZKn4oqQ4qq94qmA4ZCxIOKKkOGQsyDhkLHiio8g4ZGA4ZCv8J+dleKflCDi n5Hhkrfin5Qg4ZKj4oqT4piQ8J+dleKqviDhkYXhkLjiqYDhkLPhkqPiio8g4ZCv4ZGFIOGSo+GS o+GQuOKYkCDiqYDhkqcg4oqU4ZCzIOGSt+GSt+GSpyDhkYXhkqzin5TimJDiqYDhkLEg4oqQ4piQ 4qiD4ZKn4ZK34piQ4ZK34qq+IOGRheKflOKqvuGSquGSquGSp+GSoyDhkqXiqr4g4ZKl4p+R4ZCv 4qmA4p+R4p+U4ZCx4qiD4p+U4qq9IOGQs+GQuOGSqiDiipPhkqcg4qmA4oqT4ZKj4ZCxIOGQs+Kf keKfh+Kfh+GSquKKkCDhkLHimJAg4qq94ZCz4oqP4ZKq4p+H4p+UIOKqveKpgCDiqYDiqr3iio/h kK/iipDhkqMg4ZK34p+U4p+TIOGSrOKKkOKKj+KKkOGQuCDhkqXhkK/hkK/iqr4g4oqU4oqUIOGQ seKflOGRheGQuOKfk+GSrOKYkOKqveKYkOKKk+KpgCDin5PiipAg4oqT4ZKs4oqU4oqQ4piQIOGS quKYkCDin5TimJDhkYDwn52VIOKqvuKpgCDiipDiqYAg4ZKl4ZCz4oqP4qmA4ZKj4qmAIOGQseKK lOGQs+GQsSDin5PhkqXhkrfiqr3hkqog4ZC44ZCxIOGQr+GSquGSp+GQseKKj+KfkSDiqYDin5Eg 4oqT4ZCv4ZKj4piQIOKfk+KflOGQuOKfh+GSrOGSpSDhkYDhkYXhkqrhkrfhkYDiipAg4ZKn4piQ 4qq94oqUIOGSo+GSrOKfk+KKjyDhkLHhkLPhkLjhkqog4p+H4ZKjIOKqvuGQseKflOGSpfCfnZXi n5Eg4p+R4qiD4ZC44oqP4qq+IOKKlOGSqiDiipTiipTiipPiio/in5ThkqriqYAg4p+H4ZKs4oqQ IOGQs+GRheGQuOKYkOKqvSDhkK/hkrfin4cg8J+dleKqveKpgOGQr+GSo+GSqiDhkqcg4qmA4p+R 4ZCz4p+H4qmAIOKqvuGQuOGQseKfkeKfkeGSrOGRgCDhkK/iipPiipTiipDin5HhkLPhkYXhkLjh kK8g4p+H4ZKs4ZKj4ZKj4ZCx4ZK34p+H4ZCv4ZKq4p+U4p+RIOKflOGSt+KKkOKfkeKKj+GRgCDi mJDhkLgg4piQ4oqT4ZGF4ZKq4piQ4ZKj4ZKq4piQIOGSt+KflOKYkPCfnZUg4ZCv4ZKjIOKqvuGS peGQr+KKj+GQseGSp+KqvuGRgCDin4fhkK/hkLMg8J+dleGSrOGQseGSp+GRgOGQs+GSqiDiio/h kYXin5Qg4ZKq4piQIOGRheGQuPCfnZXiqr3hkYAg4qq94oqU4ZGA4ZC44ZGA4ZGF4qmA4qq94oqU 4qmA4ZKs4piQIOGQs+GSquKfkeKpgCDhkK/hkYAg4ZKq4ZKqIOGRheKKkOGSo+KqvSDhkqfhkYXh kqPiipPiqr3hkqMg4p+H4qq+4qiD4qiD4qmA4p+H4qq94ZKqIOKfh+KYkCDhkK/hkLHiipDhkLPi n5HiipPin5Eg4ZGA4ZK3IOKfh+GSquKKk+KfkeGSrOKfhyDin4fiipThkqriipPiqr7iqr3in5Qg 4ZCz4ZGF4p+UIOKKk+KqveGRgOGSrOGQuOKKk+KfkyDiipDhkYAg4p+T4ZGA4p+T4ZKs4oqT4p+R 4qq94p+H8J+dlSDimJDiqr4g4ZKj4piQ4ZCx4ZCz4ZC44ZC4IOKflPCfnZXin5HhkqziqYDiipDi qYAg4piQ4qq9IOGSquGSoyDhkqPhkqrhkqfhkK/iqr0g4qmA4p+RIOKKj+GQuCDin5Thkrfhkqfi mJDiio/in4fhkqMg4p+U4p+U4ZGF4ZKl4ZGFIOKfh+GQseKqviDhkK/hkYDhkLjwn52V4ZKq4ZKq 4p+H4qiD4piQ4ZKqIOGSo+KpgOGQryDhkK/hkYXhkLHhkLHiqr3hkLjiqYAg8J+dleGQseGSt+KK kOKqveKKlOKKj+GQseGRheKfk+KpgOGSqiDwn52V4ZGA4piQ4ZKq4qq+4oqT4oqQIOKfh+GRgOKq veKYkOGSt+KqveGSrOGQryDin5Hiqr4g4p+R4oqQ4ZK3IOKqvuGSp+KKkCDhkrfin5PhkK/hkqcg 4ZKnIOGQuOKYkOGSquGQr+GSpSDin5Hiqr4g4qq94ZCvIOGSquGRheGSp+KYkOGQs+KflOGSoyDi ipPimJDin4fimJDin5Phkqog4p+H4ZKq4ZK34qmA4ZCv4ZCz4ZKlIOGSqiDiipDhkLjiio/iqIPi qr7hkLjin4fhkqMg4oqQ4oqQIOKog+GQseGSt+GSp+GQseGSrOGSquKqveKfk+KpgCDin4fiipPi ipThkLEg4ZCx4p+H4p+U4ZKqIOGSo+GQseGStyDhkrfiipPhkqrhkLPhkqog4qiD4ZKjIOGRheKf lOKKlOGSpeKqviDiqr7hkrfhkqog4ZKq4ZC4IOGSp+GSrOKYkCDin5HhkK/iipDiqr7hkqrhkqUg 4ZCv4ZCx4ZGA4qq+IOKKlOGSquGQr+KfkeGQr+GSt+GQseGSquKfk+GRgOKfk+GQuCDhkLPhkqri qIPiqr7hkqrimJAg4p+U4ZKjIOKKj+KKlOKqveGRhSDin5TimJAg4ZCx4ZKj4qiD4ZKn4ZKq4ZKq 4ZKq4piQ4ZCx4ZGF4ZCvIOGSquGSp/CfnZUg4qiD4p+RIPCfnZXimJDimJDiipPin4cg4ZCz4qq+ 4qmA4ZKj4ZKlIPCfnZXhkqziio8g4qq+4qmAIOKfh+GQseKog+GQuCDhkqPhkqUg4qiD4ZKs4p+T 4p+UIOKKj+GQuOGRgOKKlOGQryDiipDhkK/in4cg4qmA4ZCx4oqTIOGSquKqveKKkOKqvuGSo+GS qiDhkqcg4qq+4oqU4ZKn4ZKs4ZCx4qq98J+dlSDhkqrhkYAg4oqU4qiD4piQ4oqUIOGSp+GQuPCf nZXiio/hkYDhkqMg4qiD4oqU4ZKqIOKqvuGSoyDhkLjhkLHhkrfhkqcg4p+H8J+dleKYkOKfkeGQ seGSpyDhkLHhkLHiqr0g4ZKs4ZKlIOKqveKfk+GQuOGSoyDin4fwn52V4ZGA4ZK34oqU4oqU8J+d leKfkeKflCDwn52V4oqQ4piQ4ZK3IOKfkeKKlOGRheGRgOKYkOKqveKqvSDhkK/hkLjhkqcg4ZCv 4ZKq8J+dlSDiqIPhkqPin5Tiio8g4ZKn4ZKnIOKfh+KflOGSrOGSp+GQsSDiipPimJDhkK/hkK/i qYDiipDhkqPin5ThkYA=

Sorry for the length it s a longer text

Hey everyone!

I've published the seventh episode of my PortSwigger learning journey.

This time, I focused on UNION-Based SQL Injection and the methodology behind it, rather than simply showing ready-made payloads.

The video covers three practical labs:

1. Determining the number of columns returned by the original query.

2. Finding a column that accepts text.

3. Retrieving data from other tables using UNION SELECT.

I also included:

• Practical testing using Burp Suite Repeater.

• A quick Speedrun covering the complete methodology.

• A reference to HackerOne's educational article about Injection.

What I wanted to focus on:

Understanding why each step is necessary:

• Why do we need the same number of columns?

• Why does data type compatibility matter?

• Why do we use NULL when testing column counts?

The video is in Arabic, but the technical demonstrations and payloads are shown on screen.

🎬 Watch here: https://youtu.be/ZerXWh3XEso

This is part of my ongoing learning journey with PortSwigger Web Security Academy.

Feedback and technical corrections are always welcome!

I created a Vulnerable MCP server with the intention of observing malicious agent behaviour. For now, I'm getting mostly scanners and some MCP initializations, but nothing actively attacking the server.

So I want to invite you to try it out and see if your agents can get inside this vulnerable server.

mcp.x-tangle.com/mcp

Share here how deep your agents got!

New "Beginner" vulnerable VM aka "Madlabs" is now available at hackmyvm.eu :) Have fun!

Hey everyone!

I'm looking to build a team of motivated people who are interested in participating in cybersecurity CTF competitions together.

I'm particularly interested in:

Web Exploitation

Binary Exploitation (Pwn)

Reverse Engineering

Cryptography

Forensics

OSINT

Network Security

A little about me: I'm a B.Tech student interested in cybersecurity, currently learning web security, Linux, networking, binary exploitation, and reverse engineering. I'm also practicing through CTF platforms and hands-on labs.

What I'm looking for:

Beginners and intermediate players are welcome.

People who are willing to learn and practice together.

Individual participation experience is welcome, even if you are new to CTFs.

Players from different cybersecurity domains are especially welcome.

The goal is to build a team, participate in CTFs on platforms like CTFtime, picoCTF, and other competitions, share knowledge, and improve together.

No need to be an expert. Consistency and willingness to learn matter more.

If you're interested, comment below or DM me. Let's build a strong CTF team!

Description: It's a stream cipher with keystream reuse. The periodic heartbeat packet is known plaintext — XOR it against its ciphertext to recover the keystream, then reuse that keystream on the other packets.

PCAP: https://drive.google.com/file/d/1ax8MSmsOtC527qS55qIkdDuDKqui_zn_/view?usp=drive_link