Resources
START HERE - (The Website Formerly Known As) PicoCTF’s personal primer for starting CTFs. This will teach you the basics of literally everything you would need to know to start it off
Rev
- Microcorruption - great reversing exercises on embedded
- reversing.kr - interesting challs
- Reverse Engineering challenges - worst UI I’ve ever seen but there’s an attached e-book and lots of challs
- crackmes - too many challs, tbh, but good for reps
- Android Reversing 101 - Amdroid
- iOS CTF - two iOS challs
PWN
- Exploit Education - qemu vm with pwn challenges from super easy to some basic heap / format strings
- Temple of PWN - DSU Student-Led PWN course from a few years back. Still a fantastic resource
- pwnable.kr - easy to difficult PWN challenges
- Nightmare - walkthroughs and explanations of tons of different pwn challenges
- how2heap - Shellphish’s resource on heap exploitation education
- ROP Emporium - ROP. Need I say more?
- Ir0nstone - Ir0nstone’s personal notes on PWN
- pwnable.xyz - interesting challs
- pwnable.tw - more interesting challs
- Vulnerabilities 1001 - potentially good & free course on basic PWN
- Root-me
- Kernel Exploitation - interesting resource if you want to get into kernel pwn, walkthrough of a CTF challenge plus additional information
Crypto
- CryptoHack - really nice course-like structure and subsequent challenges for further learning
- CryptoPals - challenges, also in a guided manner. Much more subsequent depth in a linear fashion
- BlockBreakers - guide to AES and associated cryptanalysis
- An Introduction to Mathematical Cryptography (Book) - gold standard in cryptography books
- Blupper’s blog - a top-notch beginner’s guide to lattices and lattice reduction
- A Gentle Tutorial for Lattice-Based Cryptanalysis - second step after you know what a lattice is, goes further into depth
- Cryptography 101 - lots of great tutorials / articles on cryptography (includes a lot of newer algorithms and methods fro post-quantum era cryptography)
Web
- PortSwigger Web Academy - gold standard for web education
Forensics
- Forensics - opinion-heavy, but actually a good beginner forensics resource
- THM Advent of Cyber 2023 - okay hear me out, just go and do Day 7 “‘Tis the season for log chopping”. It taught me everything I know about command line log forensics, and I would recommend it to anyone
Misc
- PWN College - frankly, the gold standard for courses in computer security
- hextree.io - Live Overflow’s courses on various things, notably Android and hardware exploitation and reverse engineering
- overthewire - they have various wargames, ranging from basic CLI to more complex topics in exploitation of various systems
- gracker - exploitation game, not sure haven’t played it
- GoogleCTF Beginner’s Quest - beginner challs based on the annual GoogleCTF
- W3Challs - lots of challenges
- SIGPwny Challenges
- ImaginaryCTF
- Open Security Training - courses for those interested (free)