Looking for a smooth introduction to ARM exploitation? Wanna learn ARM assembly? Well lucky for you this week we'll be looking at another pwnable challenge! However this time we're switching architectures! We'll be exploiting an ARM binary!

I would consider this a great introduction to ARM , however it is not necessarily the best for a complete beginner. Regardless don't be intimidated and I always suggest you dive in! 9/10 you will walk away better than you came into it!

New "Intermediate" vulnerable VM aka "Merge" at hackmyvm.eu

Have Fun!

How do I update my Burp suite from the bash shell I did type in sudo apt update && sudo apt upgrade burp suite but when i fire up my Burp it prompted me to update again...
Why is this happening?
Is there another way to update the Burp than the Bash Shell..?

Mind you, am using: Linux X-bit 6.19.14+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.19.14-1+kali1 (2026-05-05) x86_64 GNU/Linux
Thank you in advance...!

Hi everyone, I need your help. I'm writing a CTF question, but I'm very worried about the AI ​​solving it directly. So I'm thinking of writing a few different question types: physical, semi-physical semi-digital, and digital but the AI ​​won't be able to solve any of them.

Can you help me

As someone who is looking to try out capture the flag competitions and eager to learn and compete, I am occupied by the thought of AI's role in the skill aspect of competitions, so I want to know the role of AI in CTF, is it still mostly the player's skill and knowledge that matters the most or just how long they work and how many questions they ask AI.

Hey, I'm interested in cybersecurity, so I've been doing some medium-level web CTFs. Usually, I take a screenshot of the challenge and give it to Gemini for guidance. I've completed four so far, each taking around 3–4 hours. I'm not sure how to look at this—should I see it as learning, since it's explaining the concepts and guiding me through the solution, or am I just copying the answers and procrastinating ?

A while ago I made a tiny animation plugin for a school-CTF I was holding with some classmates. It got merged into the official CTFd/plugins repo so I wanted to share it here if anyone wants to add-on or use it for their events :)))

https://github.com/2alf/CTFd-solve-FX

Hi everyone,

I've been learning software engineering by building a small open-source project called SCRY.

It lets you:

• Open an image
• Drag-select the region you want
• Extract text with Tesseract OCR
• Copy the extracted text directly to your clipboard
• Show a desktop notification when it's done

The project was also an opportunity for me to learn packaging, testing, modular design, and building software incrementally.

I'd love any feedback or suggestions.

GitHub:https://github.com/Nekoyazuma/scry

Hello,

Hope you all doing well. I'm writing this to express the reality of CTF platform i made myself.

Link: https://hack4shell-ctf.vercel.app

The thing i came across is seeing people just registering and left behind (not solving anything). Those who don't know my CTF platform concept is, I will explain here. My platform contains creative challenges with live scoreboard. Once started solving challenges, the username will appear on scoreboard. It's like "picoCTF with a live scoreboard".

What i should do now to get people involve?
Am i doing anything wrong?

When i started building my capture-the-flag, i got many bugs and i'm still getting. At the same time, I'm fixing it all. I know reddit is the best place for getting users for my platform. I'm happy, if i get the users for my platform.

If you're interested to contribute to project, ping me here. I need Reverse Engineering, Misc, Pwn challenge makers. We are making this completely at no cost.

Thank you guys!!

Did anyone do the relinquished lab part of the ctf?? Its the one with the intruder. I can’t solve it for the life of me

Guys i am going with a rizz feeling i am creating a tool which is 80% completed. I DID named it scry but i just did find out now that its name was used by another tool. AND other tool named it exists. That tool is am creating is open source linux tool.

I want to create a new SFM video, but the file organization is very complex, and the file specifications aren't compatible with SFM.

Could you please rename and reformat the audio files into WAV format—41kHz, mono or stereo—so they are ready for use in Source Filmmaker? I need this urgently.

If you're looking for an exploit development tutorial for absolute beginners this week we're looking at what I would consider just that! This week we look at the "random" binary exploitation challenge hosted on pwnable[.]kr.

This is a great beginner tutorial since we exploit a flaw that is "easy" and unfortunately, still very real within some enterprise environments. It also helps you understand that no number is truly random.

The crazy part? We don't even drop into a debugger in this tutorial.

Be the end of this tutorial you should have:

- Learned about random number generation in C
- Learned about XOR operations
- Finding header files that contain dependencies using man pages
- Dissecting C source code

Hey everyone,

Over the last two weeks I've been building a browser-based Digital Forensics & Incident Response (DFIR) training platform called ENIGMA CORNER DFIR

The idea is to provide a realistic investigation experience instead of just reading walkthroughs. You work through a fictional incident by analyzing evidence from different sources, connecting artifacts, building a timeline, documenting findings, and ultimately producing an investigation report.

Current features include:

• 📁 Evidence Locker
• ⏱ Interactive Timeline
• 🕸 Investigation Board
• 🌐 Threat Intelligence
• 🖥 Simulated Terminal
• 📝 Notebook & Report Builder
• 🎯 Objectives and scoring system

Everything runs directly in the browser and is written in vanilla HTML, CSS and JavaScript—no frameworks.

The first case is called "The Phantom Login" and revolves around investigating a phishing attack, PowerShell execution, persistence, C2 traffic, and data exfiltration.

I'm still actively developing it and would really appreciate feedback from people working in DFIR, SOC, blue team, or cybersecurity training.

What do you like?
What feels unrealistic?
What features would make it more useful as a learning platform?

Here's the project:
👉 https://enigmacorner.com/

Thanks for taking a look! It is completely free .

Heyy, I'm currently exploring the world of CTFs and started by looking into the community leaderbords as I'm trying to understand what makes a truly great, complex challenge. My current tasks I'm working on, is a project to build a new benchmark for CTF-style problems, and I'm looking for insights from experienced players. Looking for current design partners :))

So basically I have a fundamental understanding of cybersecurity concepts, and I can solve challenges that dont require scripting, such as analysis of pcap files. While I do know basic python syntax such as being able to write a bubble sort function but i rlly dk how to write a complete exploit script. Do yall have any advice? Or any good guides?

Been building this for a while and finally put it public. It's a big reverse engineering and malware list, but there's a whole section for CTF and wargames that might be useful if you're grinding.

For practice it has picoCTF, Microcorruption, OverTheWire, Flare-On, Reversing.kr, pwnable.kr and pwnable.tw, Root Me, HTB and CryptoHack, plus CTFtime for the calendar. For getting in there's the CTF Field Guide, CTF 101 and CTF Wiki. The RE and pwn sections also carry the learning stuff like crackmes.one, pwn.college, Nightmare and ROP Emporium.

Every link is checked, nothing dead, and I keep pruning as things rot. It's free. If you know a good challenge site or practice resource that's missing, tell me.

I just started doing CTF from picoCFT and Tryhackme recently. But some of them keep humbling me, like how am I supposed to know those things. Is this feeling normal or am I doing something wrong.

We are seeking intermediate to advanced players across all CTF categories. We have an established team web and github. We are looking for active members who can participate frequently and fell free to contribute. Our goal is to achieve high rankings in CTF competitions and climb the CTFtime leaderboard. If you are interested, please send me a DM along with some of your previous write-ups. Thank you!

Hey everyone,

We’re organizing OSDHACK ’26, an open-source hackathon by OSDC, a student-run developer community. As part of the event, we’ve also launched a short Capture the Flag (CTF) competition.

• Prize: ₹1,000
• Deadline: July 11, 2026, at 11:59 PM IST
• Participation: Solo or team

You can register and start playing here:

https://ctf.osdc.dev/

We’ve put together a set of challenges that we hope are interesting and a little different from the usual ones. The CTF ends tomorrow, so feel free to check it out.

Main hackathon listing:

https://hack.osdc.dev/register

Disclosure: I’m one of the organizers.

Hey folks,

I am learning CTF and I have been playing with the CTF Archives repo https://github.com/sajjadium/ctf-archives.

But I don't like to browse github because it is sloooooow.

So I made (claude and me) a frontend to browse the challenges, you can upvote/downvote, rate dificulty, submit your own... Nothing too fancy but it gets the job done.

https://ctf-archives.com/

If there are any bugs you can comment this post and I will make claude work.

Happy hacking