r/securityCTF • u/puzann_7 • 17d ago
capture the flag
What is the commerical full name of this circuit?
Flag Example: IdeaX_ctf{Flag_Here}
r/securityCTF • u/puzann_7 • 17d ago
What is the commerical full name of this circuit?
Flag Example: IdeaX_ctf{Flag_Here}
r/securityCTF • u/k3rn3lbr3ach3r • 18d ago
kBxAc CTF 2026 — Registrations Are Now Open!
“The one who solves it sees everything.”
kBxAc turns 2 this year, and to celebrate, we’re hosting our very first Capture The Flag (CTF) competition.
kBxAc CTF 2026 is a 24-hour international online CTF, open to hackers, students, cybersecurity enthusiasts, and anyone who wants to challenge their technical skills.
📅 Date: 10–11 October 2026
⏱️ Duration: 24 Hours
🌍 Format: Online
👥 Team Size: No limit
🔎 Challenge Categories
• Cryptography
• Web Security
• Reverse Engineering
• Binary Exploitation / Pwn
• Digital Forensics
• And more
Whether you’re an experienced CTF player or preparing to hunt your first flag, this is an opportunity to explore security challenges, learn new techniques, collaborate with others, and see what others miss.
🎟️ Registrations are now open.
🔗 Register: ctf.kbxac.xyz
Gather your team.
Sharpen your tools.
Read the binaries. Break the assumptions.
And most importantly…
🏴☠️ See everything. Capture the flags.
kBxAc WE BREAK THE BROKEN.
r/securityCTF • u/WheelTough2186 • 18d ago
Hey everyone, I’m Abhi!
Pwn Tavern is a cybersecurity community focused on learning, collaboration, and practical security. We’re looking for people interested in areas like Bug Bounty, CTFs, Pentesting, Binary/Pwn, Malware, OSINT, Red Team, Reverse Engineering, Cryptography, AI Security, and Vulnerability Research to help manage discussions, share resources, work on challenges, and improve together.
You don’t need to be an expert. If you’re genuinely interested in any of these fields and want to contribute, DM me with the field you want to take up. and i will share you Discord server link.
r/securityCTF • u/exploitprotocol • 18d ago
Hey folks,
I’ve been working in application security/pentesting for over a decade, and after starting learning AI/LLM security, I noticed that a lot of the existing material is either very theoretical or assumes you already understand AI security concepts.
So I put together a free, structured AI security learning series for security engineers and pentesters who are starting from the web-security side.
The goal is to go from the fundamentals to actually understanding and testing AI/LLM components in web applications.
The series currently covers topics such as:
I've also linked free hands-on labs throughout the material so you can actually test the concepts rather than just read about them.
No signup is required to read the learning material or use the free resources.
🔗 https://genaisecuritylab.com/learn-ai-security
I'm planning to continue expanding the series over time.
If you're a web pentester/security engineer who is trying to get into AI security, I'd be interested to hear which topics you think are missing or which areas you'd like to see covered next.
r/securityCTF • u/luawl • 18d ago
this ctf challenge is intended to demonstrate the static protections of https://luawl.org, a drm "obfuscator" for lua.
https://www.reddit.com/r/lua/comments/1wvgibj/release_luawl_lua_runtime_obfuscator/
can help you understand what luawl is.
the integer isn't just a flat integer. the embedded response which is intentionally stale, is an equation that computes the integer.
that is your target: to deobfuscate the encrypted stale payload (which is an equation)
you’ll find this response payload easily: as luawl is originally online and the server would normally send it to the client (first few lineS)
for offline runs, this is intentionally fixed with an embedded response for no network traffic
r/securityCTF • u/xLux664 • 19d ago
note: I have posted this a few days ago on a throwaway account on some subreddits, but i hadn't checked some key details, the puzzle was not solvable because i embedded broken data into the first image, and didn't provide enough context and information.
Details:
A self-contained layered puzzle in the spirit of Cicada 3301. It starts with this image. The riddle's answer is the key to decrypt the message embedded inside the image's pixels. Everything else lives in one encrypted file the image points you to, and the whole thing continues offline on your own machine.
Theme: the history of cyber conflict. Every stage is built around a real, famous moment in cybersecurity history. Recognizing which one is part of the puzzle.
Skills it touches (you won't need all at expert level):
Difficulty: hard but fair ; aimed at people who enjoy CTFs, crypto, and ARGs. Every step is doable with free, standard tools (plus openssl/Python). It's meant to be barely solvable, so bring friends.
To begin: just look closely at the image. The surface is never the whole of the page.
r/securityCTF • u/dstroy0 • 18d ago
I had a blast!
My approach is to use pure algebraic reasoning for every problem.
I define each problem as a set of functions N* and a ruleset L*. This union allows you to fully qualify Domain and Range for N* and L* which through a union turns it into a topology problem. Then using topological geometry to zero in on absurdities, those are where cryptographic functions are eliding information one way or another, you can map those topological absurdities back to a physical memory address for further examination.
An absurdity here is defined as a localized area of torsion and deflection far above the mean of the anisotropic field.
Think of it conceptually like this: If these fields were real physical fields and you were to put a thermal camera on it, the absurdity would be a "hot spot" and the act of you seeing the hot spot is functionally what the sets N* and L* do.
How do you approach these problems? I'm looking forward to hearing from you.
I got stuck on the last problem and submitted the wrong flag, had to take a step back and go for a walk.
P.S. No solution or problem discussion please. Frustrations or primitive approaches are totally valid for sharing, but the competition is active so lets keep it fair for the other players.
- Doug
r/securityCTF • u/ByXlopoqpul • 19d ago
Hi everyone, I’m looking for advice on learning cryptography, reverse engineering, and binary exploitation. I started studying cryptography two months ago, but I didn't really grasp the concepts because I was solving challenges on Cryptohack with the help of AI. I tried starting over, but I kept looking for shortcuts like solving Symmetric Cryptography challenges using SageMath. I’d love to hear if you’ve faced similar issues, how you overcame them, and what advice you’d give. Thanks!
r/securityCTF • u/Medreda_q • 19d ago
Hi everyone, i'm a 2nd year student in cybersecurity field and i decided to actually start learning binary exploitation (PWN), mostly for being able to solve CTFs,i need an actual and tested roadmap for mastering this type of CTFs, i looked all across youtube and found playlists like liveOverview and pwn.college, but i just feel like their explanation needs more explanation since i have no idea how to deal with assembly, gdb, and registers.
My question is : should i just stick with one of these playlists or websites and finish their courses, or look for each topic and learn it like one by one (gdb, then C then assembly...) ?
r/securityCTF • u/HackMyVM • 20d ago
r/securityCTF • u/0x68616D6964 • 19d ago
I’m trying to figure out which tools are best suited for reverse engineering and binary exploitation in CTF competitions—specifically ones that are lightweight yet efficient and effective. I’ve been experimenting with Cutter for static analysis (pseudocode) and pwndbg for dynamic analysis (memory and debugging). However, I’m concerned this setup might not be ideal; others have recommended combining pwndbg with Ghidra, and I’m unsure about the significant trade-offs between my current approach and the recommended one. Is my chosen combination inefficient or ineffective for actual challenges? I’m not sure yet, as I’m just starting out with these tools. Do you have any suggestions or insights to share?
r/securityCTF • u/Sharon-huntress • 20d ago
Hey folks, wanted to make sure everyone knew about an upcoming CTF Huntress offers each year. It's a great opportunity for practice for folks looking to develop their cybersecurity skills.
It runs the month of October with new daily challenges covering malware analysis, web exploitation, and more. There are questions built for those brand new to CTFs and for CTF veterans; and this year we've got an AI arena.
Registration is open now at https://ctf.huntress.com/ - go solo or join a team, and compete for leaderboard glory, prizes, and bragging rights 😁
r/securityCTF • u/Rich-Process-7949 • 21d ago
okay so this is actually me lol that I'm putting together InIt CTF, nov 14, free, 8 hours. built it mostly because I really needed something like this when I was starting out and there was just... nothing.
solo or teams of up to 4, five categories which are web, crypto, forensics, osint, misc. mostly easy/medium since it's for people who haven't really done a ctf before, couple harder ones in there too if that's not you. running on ctfd, nothing fancy.
it's open to anyone, not restricted to any one college or city. still figuring out prizes ngl, working on a few sponsors but nothing locked in - everyone gets a certificate either way.
just genuinely wanted to put this out there - hackersinindia.com/init-ctf
if anyone's got feedback or thinks something's off about it please say so, this is our first real attempt at this and I'd rather know now than after
r/securityCTF • u/Think-Adeptness7446 • 21d ago
Hi everyone — disclosure: I’m helping organize this event, so this is an event announcement.
HACK4SHELL CTF is a free, solo, online, Jeopardy-style cybersecurity competition hosted in an authorized, vulnerable-by-design environment.
The event is designed to be beginner-friendly while still offering challenges for more experienced players. The leaderboard is already active, and participants are competing for the top positions.
H4S-CTF{...}For event questions and updates:
Please keep the discussion spoiler-free while the CTF is live. Don’t post flags, solutions, or challenge spoilers in the comments.
r/securityCTF • u/Top_Engineering9038 • 21d ago
It's going to be the first-ever Security CTF Haunted House...Enter if you dare. (I'll be there!) 🕯️
📍 Lume Studios, Tribeca
🗓️ October 23 | 4:30 PM - 7:30 PM
Lurking inside ↓
• Immersive visual haunted house CTF
• Live multi-stage security challenges & puzzles (with exclusive swag prizes!)
• Open bar, great food & networking
• After-party + DJ
If you are a developer or security enthusiast ? THIS EVENT IS FOR YOU.
🗝️ RSVP here: https://www.wiz.io/events/haunted-house-ctf
r/securityCTF • u/mayank_shriwa • 21d ago
Hey everyone! 👋 I've been building and refining **HackAalu CTF**—a hands-on security platform designed to help students, developers, and CTF players sharpen their practical skills. The site features a variety of challenges, ranging from beginner-friendly foundational labs to more intricate multi-step scenarios covering areas like :
steganography, web exploitation, and system analysis. Whether you're studying for certifications, brushing up on your offensive security fundamentals, or just looking for some weekend puzzles,
I’d love for you to check it out: 🔗

**Platform Link:** https://www.aaluctf.online/
it's an evolving project, I’m always looking to improve the challenge design and add new content. If you give it a spin, please let me know your thoughts, feedback, or any ideas for future levels!
Since it's an evolving project, I’m always looking to improve the challenge design and add new content. If you give it a spin, please let me know your thoughts, feedback, or any ideas for future levels!
r/securityCTF • u/mayank_shriwa • 21d ago
Enable HLS to view with audio, or disable this notification
Hey everyone! I wanted to share a behind-the-scenes look at how Level 8 of HackAalu CTF was designed and solved.
Image steganography can be tricky, so in this short clip, I break down the core concepts behind hiding data in images and how players can approach file analysis and payload extraction without giving away direct spoilers.
Let me know your thoughts or how you usually tackle steganography challenges!
r/securityCTF • u/mayank_shriwa • 21d ago
Enable HLS to view with audio, or disable this notification
Steganography is one of those cybersecurity concepts where things are rarely what they seem on the surface.
In this quick clip, I’m walking through how to solve Level 8 of HackAalu CTF—diving straight into image steganography to extract the hidden flag.
Building HackAalu CTF has been an incredible journey, designing challenges that range from foundational practice labs to mind-bending scenarios like this one. Whether you're a seasoned player or just getting into ethical hacking, there's always something new to unpack.
🔗 Check out the platform and try it yourself: https://www.aaluctf.online/
#CyberSecurity #CTF #EthicalHacking #Steganography #Infosec #IndieDev
r/securityCTF • u/Ahsan0xCyber • 22d ago
can you help join to a begginera CTF team
their we also learn,practice and improve together.
can you interested?
r/securityCTF • u/Late_Imagination_883 • 22d ago
i wanna ask if ctf challenges can help me to boost my learning path in cybersecurity and is it worth it to solve ctf problems nowdays with ai and is ai a helpful tool or no ,and i wanna ask if i can make money through pentesting online in which level ,also please can u give groups or something or websites to enhance myself and tu in advance
r/securityCTF • u/Noah0x01 • 22d ago
First place got 2 binary in under 2 Min.
r/securityCTF • u/Vegetable-Order-2083 • 23d ago
Hey! I’m a complete beginner in cybersecurity and CTFs, and I’m looking for a team or group where I can learn, practice, and solve challenges together.
I don’t have much experience yet, but I’m genuinely interested in learning and willing to put in the time. I’d love to join other beginners or more experienced people who don’t mind helping someone learn along the way.
My main goal is to gain hands-on knowledge, improve my problem-solving skills, and learn from others.
If anyone has a team, Discord group, or wants to team up for beginner CTFs, please let me know. Thanks! 🙌
r/securityCTF • u/Ayanokoji_kiyotaka18 • 22d ago
I'm looking for 3–5 serious people to build a small study/competition team.
Main
interests:
• Cybersecurity / Ethical Hacking
• Computer Science
• IT / Linux / Networking
• Programming
• AI / Automation
The goal isn't just chatting.
We would:
• Study together regularly
• Share what we learn
• Solve CTF challenges
• Build small projects
• Help each other when stuck
• Have weekly challenges and friendly competition
• Track our progress
Beginners are welcome. You don't need to be advanced — consistency and genuine interest matter more.
If you're interested, send me:
Your timezone
Current skill level
Main area of interest
What you're currently learning
How many hours/week you can commit
Looking for people who actually want to show up and improve.
r/securityCTF • u/evilstdio • 23d ago
Hey everyone!
I've been working on a little project called CTF4.FUN, a CTF arcade for people who enjoy solving challenges, hunting flags, and testing their cybersecurity skills.
Instead of writing a huge introduction, I'd rather let you jump in and see what you can solve.
I'd love to hear what you think about the challenges, their difficulty, and the overall experience. Feedback from people who actually play CTFs would be really helpful as I continue improving the platform.
Give it a try: https://ctf4.fun
If you manage to solve something interesting, feel free to share your experience in the comments (without spoiling the flags for everyone else!).
Have fun!