kunpen / wargame-nexus

A sorted and updated list of security wargame sites.

wargame-nexus

This is an organized, PR-able list of wargame sites. If you know of a (reasonable) wargame site not on this list (and there are definitely some), shoot me a PR. If there is a wargame site that is on this list that should not be there (and there are definitely some), shoot me a PR.

You can aggregate your score across many of these sites by registering on WeChall.

Wargames Listing

Legend

• recommended wargame
• beginner difficulty
• downloadable challenges
• no scoreboard
• bitrotted
• dead
• only playable in language X

The chals below are listed with recommended ones first, then the rest in alphabetical order.

Beginner

• OverTheWire Bandit
• OverTheWire Leviathan
• SmashTheStack Blowfish

General

• PicoCTF
• root-me
• W3Challs
• WeChall
• archive.ooo
• CodeEngn
• CTFLearn
• Defend the Web
• ExploitExercises Main Sequence
• ExploitExercises Nebula
• hacker.org
• HackerGateway
• HackTheBox
• HackThisSite
• HallsOfValhalla
• HellBound Hackers
• Komodo CTF
• Ma's Reversing
• Mod-X
• NewbieContest
• OverTheWire Semtex
• 0x539
• RingZer0Team Online CTF
• SmashTheStack Logic
• VulnHub
• ksnctf
• akictf
• MNCTF
• 柚子胡椒CTF
• CpawCTF
• CpawCTF2
• YEHD 2015 CTF
• MAGURO β

Binary Pwning

• pwnable.kr
• pwnable.tw
• ExploitExercises Fusion
• ExploitExercises Phoenix
• HackSys Extreme Vulnerable Driver
• IO64
• IO
• Microcorruption
• OverTheWire Behemoth
• OverTheWire Drifter
• OverTheWire Manpage
• OverTheWire Maze
• OverTheWire Narnia
• OverTheWire Unomo
• OverTheWire Vortex
• pwn.college
• ROP.sh
• ROP Emporium
• pwnable.xyz

Binary Reversing

• reversing.kr
• crackmes.one
• crackmes.de (mirror)
• IOLI64

Mobile

• reyammer.io

Web

• alert(1) to win
• websec.fr
• webhacking.kr
• 0xf.at
• Google Gruyere
• HackerTest
• OverTheWire Natas
• Stereotyped Challenges
• XSS Game
• XSS game area
• XSS PwnFunction

Crypto

• id0-rsa
• Matasano Cryptopals
• OverTheWire Krypton
• Crypto Hack
• Ethernaut (Solidity)

Cloud

• flAWS
• flAWS 2

Unsorted

• IO07
• SmashTheStack Amateria
• SmashTheStack Tux
• Viblo
• CTF 101

Not Security

Developing some core CS skills can be useful for security as well!

• Tensor Puzzles

Gone, but not forgotten

• Backdoor
• Bright Shadows
• CHALLENGE LAND
• ctfs.me
• HackBurger
• HackMe
• hax.tor
• IOarm
• Net-Force
• The Enigma Group
• WTHack
• MMA CTF

Credit

I acquired the links here over a very long career. At some point, I started noting down resources that led me to these links. They are:

• https://medium.com/@a.hilton83/learning-resources-a0a859bf9dbd
• http://captf.com/practice-ctf/
• http://www.wechall.net/sites.php
• http://ctf.forgottensec.com/wiki/index.php?title=Main_Page
• https://github.com/carpedm20/awesome-hacking
• https://csea-iitb.github.io/IITBreachers-wiki/2020/08/01/Hacking-Sites.html