22 sites for hacking and security practices

Hacker

Professional
Messages
1,044
Reaction score
812
Points
113
The ad platforms listed below are only available in English.

1. CTF365 - ctf365.com

CTF365 users install and protect their own servers while attacking other users ' servers. CTF365 is suitable for security professionals who want to acquire offensive skills, or system administrators who are interested in improving their defensive skills. If you are new to the infosec, you can register for a free beginner account and get to know it using several pre-configured vulnerable servers.

2. OVERTHEWIRE - overthewire.org/wargames

OverTheWire is suitable for anyone who wants to learn the theory of information security and apply it in practice, regardless of their experience. Beginners should start with Bandit-level tasks, as they are necessary for further solving other tasks.

3. HACKING-LAB - www.hacking-lab.com/index.html

Hacking-Lab provides CTF challenges for the European Cyber Security Challenge, but they also host regular competitions on their platform that anyone can participate in. Just register, set up a vpn, and choose a task that suits your taste.

4. PWNABLE.KR - pwnable.kr

This platform focuses on pwn tasks similar to CTF, which consist in finding, reading, and sending flag files that are included in each task. To access the contents of the files, you must use programming, reverse engineering, or vulnerability management skills before you can submit a solution.

Tasks are divided into 4 levels of difficulty: easy-for beginners, medium, hard and hardcore, where tasks require non-standard approaches to solve.

5. IO - io.netgarage.org

IO is a wargame from the creators netgarage.org, a community where like-minded people share knowledge about security, artificial intelligence, VR, and more. 3 versions of the wargame were created: IO, IO64, and IOarm. IO is the most mature of them all. Connect to IO via SSH and you can get started.

6. SMASHTHESTACK - smashthestack.org

SmashTheStack consists of 7 different wargames: Amateria, Apfel (currently offline), Blackbox, Blowfish, CTF (currently offline), Logic, and Tux. Each wargame contains many tasks, ranging from standard vulnerabilities to reverse engineering tasks.

7. MICROCORRUPTION - microcorruption.com/login

Microcorruption is a CTF in which you need to "reverse engineer" fictional electronic locking devices Lockitall. Lockitall devices protect bonds placed in warehouses owned by the fictional company Cy Yombinator. On your way to stealing bonds, you'll learn assembly language, how to use a debugger, step through code, set breakpoints, and explore memory.

8. REVERSING.KR - reversing.kr/index.php

Here you can find 26 challenges to test your hacking and reverse engineering skills. The site has not been updated since the end of 2012, but the tasks available are still valuable learning resources.

9. HACK THIS SITE - www.hackthissite.org

Hack This Site is a free website with wargames to test and improve your hacking skills. You can find a lot of hacking tasks in several categories, including basic tasks, realistic tasks, applications, programming, phreaking, JavaScript, forensic science, steganography, etc. The site also boasts an active community with a large catalog of hacker articles and a forum for discussing security-related issues. It was recently announced that the site's codebase will be revised, so we can expect big improvements in the coming months.

10. W3CHALLS - w3challs.com

W3Challs is a learning platform with a variety of tasks in various categories, including hacking, wargames, forensic science, cryptography, steganography, and programming. The goal of the platform is to provide realistic tasks. Depending on the difficulty of the completed task, you will receive points. There is also a forum where you can discuss and solve problems with other participants.

11. PWN0 - pwn0.com

The pwn0 platform is a VPN where almost anything happens. Fight against bots or users and gain points by gaining control of other systems.

12. EXPLOIT EXERCISES - exploit-exercises.com

Exploit Exercises offers a variety of virtual machines, documentation, and tasks that can help you learn privilege escalation, vulnerability analysis, exploit development, debugging, reverse engineering, and more.

13. RINGZER0 TEAM ONLINE CTF - ringzer0team.com

RingZer0 Team Online CTF offers more than 200 tasks that will allow you to test your hacking skills in several areas-from cryptography, malware analysis to SQL injection, shellcoding and much more. Once you have found a solution to the problem, you can send it to RingZer0 Team. If your decision is made, you will receive RingZer0Gold, which can be exchanged for hints while solving problems.

14. HELLBOUND HACKERS - www.hellboundhackers.org

On Hellbound Hackers, you can find traditional tasks with exploits and task formats that are not available on other resources. For example, application patching and time-limited tasks. In patching tasks, you are given a vulnerable piece of code and need to offer a fix for this vulnerability.

15. TRY2HACK - www.try2hack.nl

Try2Hack is one of the oldest sites for improving hacking skills that still remains afloat. It offers several challenges to keep you entertained. The challenges are diverse and become more complex as you progress.

16. HACK.ME - hack.me

Hack.me It is a large collection of vulnerable web applications for applying hacking skills in practice. All apps are provided by the community and can be run on the fly in a secure, sandboxed environment.

17. HACKTHIS!! - www.hackthis.co.uk

HackThis!! It consists of 50+ tasks of different levels, for solving each of which you get a certain amount of points depending on the difficulty level. Similar to Hack This Site, HackThis!! There is also a lively community, numerous articles and news about hacking, and a forum where you can discuss security-related tasks and issues.

18. ENIGMA GROUP - www.enigmagroup.org

The Enigma Group contains more than 300 issues with a focus on the top 10 OWASP exploits. The site has almost 48,000 active members and hosts weekly CTF competitions, as well as weekly and monthly contests.

19. GOOGLE GRUYERE - google-gruyere.appspot.com

Google Gruyere shows you how to exploit web application vulnerabilities and how to protect yourself from them. You can perform real penetration testing and actually hack a real application using attacks like XSS and XSRF.

20. GAME OF HACKS - www.gameofhacks.com

Game of Hacks shows you a set of code snippets in the form of a quiz with several options to choose from, and you must determine the correct vulnerability in the code. This site stands out a little from this list, but it is nevertheless a good game for identifying vulnerabilities in the code.

21. ROOT ME - www.root-me.org

Root Me offers more than 200 challenges and more than 50 virtual environments, allowing you to put your hacking skills into practice in a variety of scenarios. This is definitely one of the best sites on this list.

22. CTFTIME - ctftime.org

While CTFtime isn't a hacking site like the others on this list, it's a great resource to stay up-to-date with CTF competitions happening around the world. Therefore, if you are interested in joining a CTF team or participating in a competition, you should look here.
 
Top