Danh sách các CTF nên chơi :)

Dưới đây là danh sách các site CTF mọi người nên chơi. Mọi người tham khảo xem nhé :)

Recommended

• http://hax.tor.hu/
• https://pwn0.com/
• http://www.smashthestack.org/
• http://www.hellboundhackers.org/
• http://www.overthewire.org/wargames/
• http://counterhack.net/Counter_Hack/Challenges.html
• http://www.hackthissite.org/
• http://exploit-exercises.com/
• http://vulnhub.com/

 

Others

• http://damo.clanteam.com/
• http://p6drad-teel.net/~windo/wargame/
• http://roothack.org/
• http://bright-shadows.net/
• http://www.mod-x.co.uk/main.php
• http://scanme.nmap.org/
• http://www.hackertest.net/
• http://net-force.nl/
• http://securityoverride.org/ Some good concepts, but "canned" vulnerabilities (string matching on input) will frustrate knowledgable hackers and teach newbies the wrong lessons

Meta

• http://www.wechall.net/sites.php (excellent list of challenge sites)
• http://ctf.forgottensec.com/wiki/ (good CTF wiki, though focused on CCDC)
• http://repo.shell-storm.org/CTF/ (great archive of recent CTFs)

Webapp Specific

• http://demo.testfire.net/
• http://wocares.com/xsstester.php
• http://crackme.cenzic.com/
• http://test.acunetix.com/
• http://zero.webappsecurity.com/
• http://ha.ckers.org/challenge/
• http://ha.ckers.org/challenge2/

Forensics Specific

• http://computer-forensics.sans.org/community/challenges
• http://www.dc3.mil/challenge/
• http://forensicscontest.com/

Recruiting

• http://rtncyberjobs.com/
• http://0x41414141.com/

Paid Training

• http://heorot.net/

Downloadable Offline Games

• http://www.badstore.net/
• http://www.owasp.org/index.php/CategoryWASP_WebGoat_Project
• http://www.owasp.org/index.php/Owasp_SiteGenerator
• Damn Vulnerable Web App
• Stanford SecureBench
• Stanford SecureBench Micro
• Damn Vulnerable Linux (not currently live? local mirror)
• http://www.irongeek.com/i.php?page=security/mutillidae-deliberately-vulnerable-php-owasp-top-10

Inactive or Gone

Just around for historical sake, or on the off-chance they come back.

• http://rootcontest.com/
• http://intruded.net/
• https://how2hack.net
• WebMaven (Buggy Bank)
• http://www.foundstone.com/us/resources/proddesc/hacmetravel.htm
• http://www.foundstone.com/us/resources/proddesc/hacmebooks.htm
• http://www.foundstone.com/us/resources/proddesc/hacmecasino.htm
• http://www.foundstone.com/us/resources/proddesc/hacmeshipping.htm
• http://hackme.ntobjectives.com/
• http://testphp.acunetix.com/
• http://testasp.acunetix.com/Default.asp
• http://prequals.nuitduhack.com
• http://www.gat3way.eu/index.php (Russian) 

Ngoài ra còn có:

http://io.smashthestack.org/
http://www.hackertest.net
http://hax.tor.hu/welcome/
http://repo.shell-storm.org/CTF/
http://www.wechall.net/challs
http://www.hacking-challenges.de/index.php?page=hackits
http://www.wixxerd.com/challenges/
http://canyouhack.it/
http://www.root-me.org/fr/Challenges
http://www.happy-security.de/
http://www.newbiecontest.org/index.php?page=challenges
http://www.dareyourmind.net/menu.php
http://www.lost-chall.org/index.php
http://www.infomirmo.fr/cryptographe.php
http://www.thisislegal.com/challenges
http://warzone.elhacker.net/
http://www.trythis0ne.com/?page=home
http://www.mibs-challenges.de/
http://3564020356.org/
http://sys.warchall.net/
http://www.hacker.org/
http://www.osix.net/modules/geek/
http://www.cstutoringcenter.com/problems/
http://hackbbs.org/index.php
http://www.spoj.com/ranks/users/
https://www.solve.edu.pl/tasks
http://gekko.csokavar.hu/login.php
http://webhacking.kr/
http://w3challs.com/challenges
http://www.enigmagroup.org/
http://hack-me.org/
http://www.wargame.kr/?page=challenge
http://halls-of-valhalla.org/challenges/
http://hacking.allowed.org/cgi-bin/pageview.cgi?page=challenges
http://suninatas.com/
http://chall.tasteless.se/index.php
http://damienoreilly.org/ctf/challenges.php

RE
http://reversing.kr/challenge.php

Crypto
http://www.microcontest.com/contests.php
Sqli:
http://www.zixem.altervista.org/SQLi/
http://redtiger.dyndns.org/hackit/
Forensic
http://www.honeynet.org/
http://forensicscontest.com/tools