Hello, r/securityCTF ! I'm excited to invite you to a growing Discord server tailored for cybersecurity enthusiasts and tech lovers. This isn’t just another promo – our server is dedicated to:

• Resources & Learning: We’ve curated a resource library where members can access a variety of tools and guides for building cybersecurity skills.
• Capture The Flag (CTF): Join our CTF team! Whether you're experienced or just starting, you'll find opportunities to train, compete, and grow.
• Discussions & Hackathons: Dive into discussions on your favorite tech topics and connect with peers for online and in-person hackathons. (Singapore events included!)

Come be part of a team that learns and innovates together. https://discord.gg/FfSjr6k8NH

Looking forward to welcoming some of you there!

Hi!

I am having trouble with a CTF challenge offered by a company my employer does business with...

Using foremost I was able to get a PNG out of the file they provided.

Unfortunately the flag is not readable because some areas are, as far as I can tell, transparent as I am shown the checkerboard pattern many programs use to show that a section of an image is transparent.

I tried a few things which were supposedly supposed to remove transparencies but what I ended up with was either white or black blocks on the image instead of the checkerboard pattern.

PNG does not apparently support layers but my guess is that they messed with something on that picture to make some areas transparent and there must be a way to revert that....

Any ideas?

Thank you!

Very lost, ive installed the ctf git repository onto vs code and my desktop, unsure how to actually run any of these py files and just even start the game without my own bot.

Hi all,

I am a beginner and solving a Steganography CTF challenge where initially I got a file, figured it out to be docx format and then renamed to .zip and now I am trying to unzip it but its' asking for password.

Is there some online tools which will be fast and ry to decrypt passwords comparing with rockyou.txt, also any guidance on getting the password and ultimately the CTF will be great

hi! I'm currently looking for a CTF team.

• decent amount of experience with Linux, backend development, front-end frameworks (next.js, astro, react etc.)

• worked with python, golang, rust, js and c++ in the past

• previously participated in 3-4 CTFs and won 2 local uni/high school CTFs.

• I'm good with forensic and web exploitation challenges.

• been practicing on hackthebox & tryhackme for a while now.

I'm willing to learn more and participate in more CTFs with a team. If you're interested in taking me in your team - shoot a DM.

Hi there, I’m in my fourth year of undergraduate study, and about two months ago, I finally decided to change my major (from AI) to cybersecurity.

I’m quite interested in Web Security, and I’m a beginner in CTF. However, I find it difficult for me to find or join a CTF team because the people around me are mostly not not interested in these stuffs, so I come to the Internet.

I want to find some partners to learn CTF and take part in competitions together. I’ll mainly focus on Web challenges, but I can also contribute to Misc problems and simple RE problems. There‘s currently only me alone, and I hope to find others who are interested in CTF to eventually form a team of 4 - 6 teammates. If you are interest in, plz DM me 🙏!!!!

If anyone already has a team and is recruiting for Web teammates, plz DM me as well !!!!

About me:

• I’m chinese and currently in China.
• I am familiar with C/C++, Python, and JavaScript, and I’m learning Java recently.
• I have experience in front-end development （I use React）, and I have learned web crawlers (Python requests).
• For CTFs, I have learned some basic sqli/ssti/PHP-related attacks/XSS/… and have participated in 2 recruitment competitions for CTF university clubs in China (I ranked both top 10%).

Please forgive me for not being very familiar with the social media platforms you guys usually use for communication. I have Telegram, X (formerly Twitter), Reddit, and Discord accounts. If you're interested, feel free to message me on Reddit, and we can exchange contact information further!!!

Hey!

As the title says, I'm looking for a group of people who regularly participate in CTFs. I'm part of a CTF club/team though they're all pretty damn good, and a lot of the CTFs that they participate in are above my level and so I end up being a bit of a dead weight. At the same time, I learn a lot from being in a group and its generally more motivating.

I'm a CS student though I'm still only a beginner/intermediate player, but I've come to absolutely love the challenge and I'm spending hours every day trying to learn. So if anyone out there is looking for members, dm me!

I just completed level 15 and I think I got the correct password (at least checking through the database given in 15) but for some reason I can't get into natas16 - is anyone else able to get in?

well i am playing Kerberos - Authentication lab from root-me.org , i given with a pcapng file of kerberos authentication ,i extracted the pasword hash using bruteshark , i tried cracking it with hashcat hashmode 19700, i tried different wordlists but still nothing , i am struck ,i need help .

the hash that i extracted from pcapng file :

$krb5tgs$18$william.dupond$CATCORP.LOCAL$*cifs/DC01.catcorp.local*$15a0981a1c14990b85babef4$168d462fef2c82289dbac48f37954672bc3d27737d960a36b22f0f5276a5a8d0838c34830458455072fdb4afb52671371a1d9d0904b417a5eddcdcf8caf66e8133cb27c6f6c217256f11983840828b328224201bf0e3a33cf5b6af807371b2d8557bcf3012d6902f46d3c116862bbdd03e01ede8959c579f24a4d4dd23853a84a73f33814d57b895ec5176b41c9b44a5c0cdf3523f9b0baa22a1c5b7da2915192e8a1b02de7f75acf26cbd1913223a87ad278addf18e03812b691d48410f9cf580480293a3d8d9987813635c294b68a21b7473056fd4ee536778b9655cb4909436793078570b88128ba27736c45f286be7817e7a55e1414ba5557d9ea5483c6588cca870d8dbff7c00d05709701fd46d8f5274ea581c8805e03fcf34541046523639e6cf05a76e15036abed561af63657cf56fa8b4497018adf9ba2c58161fa721e9aad63892ee6f43d54ea43a2dc0c70dc30c72cc9fee5380096b402ddf06a73a057ab22e1a8e16579a5e86aa50a1465dd3eaa01e82b5d85b4228b92d86ce4c888f0af894bb7f798df1f737d417470ecf57e386e2175a8ebda7b24e1497cc1ef5b3240fcaa179ab82ec363b5720bc745e87637530f624aeed88ef8a3c51fc8b5297e88c8a63d07a923c261457e57610f6a95bbb172415ad0cbbe252739d63705bde5aec6e0f5a0fda66b52a2a39c26375216f1faee70a06a1fd24175d305eccc3c7266e2dba5f4931068f115ea2c05ca078302ebfa87a9a9142b5d7823f296ef032a530311f9f44be76d98990e808fe5bcc9668e9c119e2e9c185f0dfa2f1376387890515c6699a1924046553aa40091e318434ac7d69819c2a15bd0996de1ed52f26dba215783a4fe89e45d3df30be35e747db2143d9dda6024c8312b0279bd2ebc287a20741ba2d7934c34fe5b4c3a3b14adb9e5f937fcfc37f59eab2efeb1933743e690de864ce397e13c2f0f99cfb8fa8d16028357b2473cdddefe131b2fac3951edcfbf2b78fb62afab33a9ad6c8c58c798fe286954fd74660209439c604f4138913a62dec067b4a14248bf4f9704712b4a2555231d4ec174a65d8c7948e9f240e1fb7ddca6d987ee695d38e3273517c8d27cb06809d476c7ff49e31ba1fec80bd9c0c8da1ae4107de3b3153453080a37c30626495a775b17c1d4a408d992592bf0f928e25d309e1af496aba19d512d341f1b0d070ee455f7ac15a52c58c36554703c4367213478e3f65d2e7329dc4f76c20fd894dbbe04bbe4847d71f16e03704f97254db29bcc1e0c2c97fc74a8929d45ec5c5bde371c723f6aaa0e2cde3365ed5f7def0a7ae6798ac0cff1ef717d7cec57ccc230f8f0b5f616d6b4572467e2453ee4ff6b2327ff5e11571dc009bb9cfa4a9722e120d641b2d488b280d4b44865d320178dea7a6e1a02bb03c244dca39e201a6266c76378c911c80aec40090abbbdb11bedb4795d436157b2a8f9e7b9f6aa913a4eb2e1e8fb79d6ee911bcb0d6b78a43312d7548d13861563e74be13749a0172622924328a0a8dcc476248adb3197bf83eb209314cba0e655ee024e106c6a9db4a441acaee20a15455921b342496272550b44186a5

New vulnerable VM aka "Smol" is now available at hackmyvm.eu :)

Hi everyone,

I'm currently facing a SQL injection challenge, and I'm certain it's SQLi-related. The challenge is on the following site: hlabs.helb-prigogine.be:6543/patrick.php

For most other challenges involving SQL injection, I just had to bypass simple filters, but in this case, I'm completely stuck. Every time I perform an SQL injection, the server responds with the message "cot ?" and I can't figure out how to proceed from here.

I've also tried using SQLmap as a last resort, but it didn't return anything conclusive.

Any help or pointers would be really appreciated!

Thanks in advance!

i am quite new in ctf and got not that much connection and network so is there any blog or social media that posts ctf competitions for beginners or intermediates?

Hey everyone. So I've started getting into CTFs recently. When I read writeups of others, the majority of time, 99% of the time, I see them solve it using Python scripts. They use custom libraries and other stuff (mainly pwntools) for the scripts.

I've picked up the basics of Python. Now I'm looking forward to learning the CTF-specific Python knowledge so I can start reading other's code more comfortably and craft my own scripts. Video, and text content all are welcome. Thank you.

Hello there I'm new to ctf and on task is to find the flag from a image. I'm having trouble as to what to do ive used exif and seen the hex dump but i dont know what to do.

the image in question.

https://preview.redd.it/18xhjdf97wvd1.png?width=1080&format=png&auto=webp&s=b37f7e869e88be875916b7d8b44ff12577e3a9a6

Are you ready to outsmart cyber adversaries and protect AI systems from the next big threat? 💥

Form a squad of up to 4 people and compete in the Open or Pre-U categories. Your mission? Investigate attacks on JagaLLM, a fictional AI system, and uncover hidden threats across 7 AI domains.

🏆 SGD 10,000 in prizes awaits the top teams—will you claim victory?

Key Dates:

🗓 26 October – Round 1 (Virtual)

⏱️ 48-hour Jeopardy-style challenge

Register now: go.gov.sg/singaporeaictf

(Deadline: 25 October, 11:59 PM)

Need more details? Visit: go.gov.sg/sgaictf

Are you ready to fight, hack, and win? ⚔️ Let the games begin! 🎮

PS: It's nice to see that there have been posts of this event in the sub-reddit. Looking forward to seeing you in the competition!

Need help in solving this question

One of our operatives is in trouble and needs help from the Wolverine. Some how we were able to pass the message to Logan via the old network and he has agreed to meet our operative. However, Wolverine wants to meet the operative on the location where he first met Yashida. And, before we could get more information about the location from him, we lost the contact. You have to find the location coordinates

Answer is geo cordinates xx.xx, yy.yy

Been a hobbyist CTF player for a bit now and I'm looking at getting better with reverse engineering challenges.

I always feel clueless when trying to do them and often give up quite easily so I came here to ask for advice on getting better. I know that the answer is probably to reverse some more until I get better but I feel like I lack some prerequisites to attempt these challenges and have a good chance at learning from them and I'm trying to look for good places to get those prerequisites.

If it helps, I can read basic c and assembly and have basic binary exploitation knowledge. I'm a newbie at GDB but I have worked with it a bit before.

Thank you.

The wait is almost over—DEADFACE CTF is happening in just a few hours 🔥

🗓️ Event Date: Friday, October 18 @ 09:00 CT - Saturday, October 19 @ 19:00 CT 💻 Get Ready: Register your account at https://ctf.deadface.io

Stay tuned for more updates and make sure you're prepared to dive into the action. Good luck to everyone—we can’t wait to see you on the leaderboard!

Here is the link:- https://neuland-ingolstadt.de/ctf-training/

I'm looking for teammates to join me in participating in the upcoming Singapore AI CTF 2024 - Open Category. This is my first time joining an AI CTF, and I'm excited to team up with like-minded individuals who are interested in exploring this challenge together.

Event Details:

What: Singapore AI CTF 2024 - Category 1: Open

Format: 48-Hour Preliminary Virtual Round

Start: Saturday, 26th October 2024, 8am (UTC+8 Singapore Time)

End: Monday, 28th October 2024, 8am (UTC+8 Singapore Time)

More details on the topics, rules, etc can be found here: https://www.tech.gov.sg/media/events/singapore-ai-ctf-2024/

I'm new to AI CTFs, so this will be a learning experience for me. If interested, please private message me.

Hey guys I'm starting my ctf journey ive done some research but idk much can yall help me with how I should proceed,what all should I learn and any tips are helpful. Thank you

So guys i already learned cryptographic basics for ctf but in every challenges there is new concepts new mathematical solution i've never meet in my life they cant mastery all this rules is there a method to know what type of math problem is this or the solution may be

So I am someone who just came to know about CTF and let me tell you my situation

Basically I am someone with zero knowledge of cybersecurity, just learning to code a bit(beginner). So the thing is I just joined my college and I came to know people participating in CTF, that's where I came to know about it.

Now please guide me as to what and from where to learn for ctf.

Like a proper roadmap

Hey everyone,

I’m interested in getting into Capture The Flag (CTF) challenges and platforms like TryHackMe and Hack The Box. However, I feel like I’m missing some fundamental knowledge, especially around using Linux commands effectively.

Specifically, I’d appreciate any guidance on:

1. Reverse Shells: How to establish a reverse connection using various Linux commands and tools. Are there any beginner-friendly resources that cover this?
2. File Searches: How to search for specific files or patterns in Linux. What are the essential commands and techniques I need to know?
3. Listening on Ports: How to set up a listener on a specific port to catch a reverse shell. What tools or commands are recommended?
4. Data Transfer over SSH: How to move files from and to an SSH connection. I’m not sure what’s the best way to do this securely and efficiently.
5. Scripting and Automation: What scripting languages or tools should I learn to automate tasks in CTF challenges? Are there any specific scripts that are commonly used or useful for CTFs?
6. General Knowledge: What core skills should I master to tackle TryHackMe or Hack The Box rooms successfully? Are there particular learning paths or resources I should start with?

If anyone could recommend tutorials, books, or specific online courses that focus on these topics, it would be super helpful! I’m open to any other advice or resources that you think would help me get started on the right foot.

Thanks in advance for your help!

New challenges every Friday. You have time until October 25th to complete all challenges and win awesome prizes.

ctf{.}cybermaterial{.}com

Flag Format: Flags will follow the format CM{[a-zA-Z0-9_,.'"?!@$*:-+ ]+}.

No Brute Force: Only submit well-thought-out answers.

Points: Points are awarded based on challenge difficulty.

For Hints: Join our Discord.

If you want to design a few challenges, reach out to our Discord Admin Team!