CTF Challenges
7 challenge categories, 42 challenge topics
Capture-the-flag challenges build practical skills by solving realistic problems in safe, isolated environments. Each category below lists its challenge topics.
CTF exercises are for isolated lab environments only — never practise these techniques on systems you don't own or aren't authorised to test. Acceptable use
Linux Forensics
ctf-101 to ctf-106 · 6 challenges
File navigation, hidden files, log analysis, process investigation, disk & memory forensics.
Web Security
ctf-201 to ctf-206 · 6 challenges
SQL injection, XSS, command injection, SSRF, authentication bypass, and IDOR.
Network Analysis
ctf-301 to ctf-306 · 6 challenges
Packet capture analysis, DNS exfiltration, C2 detection, forensics, traffic analysis, IDS evasion.
Cloud Security
ctf-401 to ctf-406 · 6 challenges
AWS IAM misconfig, S3 exposure, Kubernetes pod escape, Lambda exploitation, Azure RBAC, GCP privesc.
Memory Forensics
ctf-501 to ctf-506 · 6 challenges
Volatility analysis, process injection, malware extraction, network connections, registry, timelines.
Container Security
ctf-601 to ctf-606 · 6 challenges
Docker escape, container breakout, image scanning, runtime analysis, secrets extraction, orchestrators.
AI Security
ctf-701 to ctf-706 · 6 challenges
Prompt injection, RAG exploitation, model poisoning, data exfiltration, jailbreaking, adversarial inputs.
Learn with the Society
Explore more free resources in our community hub, or ask about practical security training for your team.