不容错过的CTF竞赛资源汇总

谁借莪１个温暖的怀抱￠ 2022-05-28 05:49 314阅读 0赞

在国内外CTF比赛越来越热门的背景下，大家都是怎么准备CTF的？

国内外比较知名的比赛：XCTF联赛、DEFCON CTF、首都网络安全日。

做为CTF小白用户，跳过的坑真心不少，加密、隐写、逆向破解和web这几个方向的坑，基本是跳一个栽一个。不过还是靠着免费的线上模拟平台，终于成功脱坑，技术也越来越熟练。

在学习中，我总结了一些值得CTF新手和CTF刚刚入门爱好者，学习的干货。

看点

如何开始你的CTF比赛之旅

A、[http://www.freebuf.com/articles/others-articles/36927.html][http_www.freebuf.com_articles_others-articles_36927.html]

B、CTF领域指南⇒[http://blog.idf.cn/2015/02/ctf-field-guide/][http_blog.idf.cn_2015_02_ctf-field-guide]

C、CTF预告⇒[https://ctftime.org/event/list/upcoming][https_ctftime.org_event_list_upcoming]

看点

CTF练习平台

A、网络信息安全攻防学习平台⇒[http://hackinglab.cn/][http_hackinglab.cn]

B、ctf题目⇒[http://captf.com/][http_captf.com]

C、XCTF\_OJ练习平台⇒[http://oj.xctf.org.cn/][http_oj.xctf.org.cn]

D、Jlu.CTF⇒[http://ctf.3sec.cn/][http_ctf.3sec.cn]

E、i春秋ctf挑战⇒[http://www.ichunqiu.com/tiaozhans][http_www.ichunqiu.com_tiaozhans]

F、IDF实验室⇒[http://ctf.idf.cn/][http_ctf.idf.cn]

G、米安网ctf⇒[http://ctf.moonsos.com/pentest][http_ctf.moonsos.com_pentest]

H、合天ctf⇒[http://www.hetianlab.com/CTFrace.html][http_www.hetianlab.com_CTFrace.html]

I、实验吧⇒[http://www.shiyanbar.com/ctf/][http_www.shiyanbar.com_ctf]

J、BCTF复盘⇒[https://bctf.cn/\#/challenge][https_bctf.cn_challenge]

看点

CTF XSS

A、[http://xss.pkav.net/xss/][http_xss.pkav.net_xss]

B、[http://xss-quiz.int21h.jp/][http_xss-quiz.int21h.jp]

C、[http://escape.alf.nu/][http_escape.alf.nu]

看点

CTF SQL Inject

A、[http://redtiger.labs.overthewire.org/][http_redtiger.labs.overthewire.org] 个人感觉挺不错的

B、[https://github.com/Audi-1/sqli-labs][https_github.com_Audi-1_sqli-labs]

看点

CTF RE & PWN

A、逆向⇒[http://reversing.kr/][http_reversing.kr]

B、PWN⇒[http://pwnable.kr/][http_pwnable.kr]

C、提供各种虚拟机、文档和挑战⇒[http://exploit-exercises.com/][http_exploit-exercises.com]

D、各种逆向题(英文)⇒[http://security.cs.rpi.edu/courses/binexp-spring2015/][http_security.cs.rpi.edu_courses_binexp-spring2015]

E、吾爱破解论坛⇒[http://www.52pojie.cn][http_www.52pojie.cn]

看点

CTF游戏

A、光棍节程序员闯关秀⇒[http://1111.segmentfault.com/][http_1111.segmentfault.com]

B、梦之光芒的小游戏⇒[http://monyer.com/game/game1/][http_monyer.com_game_game1]

C、黑客丛林之旅⇒[http://www.fj543.com/hack/][http_www.fj543.com_hack]

D、习科黑客游戏⇒[http://hackgame.blackbap.org/][http_hackgame.blackbap.org]

E、ISA闯关游戏⇒[http://www.helloisa.com/test/][http_www.helloisa.com_test]

F、红客闯关游戏⇒[http://hkyx.myhack58.com/][http_hkyx.myhack58.com]

G、hackit游戏⇒[http://hackit.sinaapp.com/][http_hackit.sinaapp.com]

看点

CTF Tools

A、PWN工具⇒[http://bobao.360.cn/news/detail/1100.html][http_bobao.360.cn_news_detail_1100.html]

B、CTF瑞士军刀⇒[http://www.tasfa.cn/index.php/2016/01/29/ctf-tools-2/][http_www.tasfa.cn_index.php_2016_01_29_ctf-tools-2]

C、世界著名CTF战队提供的工具⇒[http://forum.cnsec.org/thread-93930-1-1.html][http_forum.cnsec.org_thread-93930-1-1.html]

D、CTF-GUI (英文)⇒[http://wololo.net/talk/viewtopic.php?f=27&t=39000][http_wololo.net_talk_viewtopic.php_f_27_t_39000]

看点

CTF WriteUp

A、360播报⇒[http://bobao.360.cn/ctf/][http_bobao.360.cn_ctf]

B、github上writeup⇒[https://github.com/ctfs/][https_github.com_ctfs]

C、安全脉搏⇒[http://www.secpulse.com/archives/category/exclusive/][http_www.secpulse.com_archives_category_exclusive]

看点

ctf-writeup国外篇

A、类似wargame⇒[http://overthewire.org][http_overthewire.org]

B、经常玩的一个⇒[http://www.root-me.org/?lang=en][http_www.root-me.org_lang_en]

C、比较杂乱，建议英文好的才用这个⇒[http://www.wechall.net][http_www.wechall.net]

D、有逆向题还有paper(部分中文)⇒[http://insight-labs.org/][http_insight-labs.org]

E、比较不错⇒[http://wargame.kr/][http_wargame.kr]

F、CTF综合练习，分类较清楚，首选⇒[http://canyouhack.it/][http_canyouhack.it]

G、游戏，有点酷炫。没玩过⇒[http://webhacking.kr/][http_webhacking.kr]

H、XSS⇒[http://prompt.ml/0][http_prompt.ml_0]

I、闯关游戏⇒[http://fun.coolshell.cn/][http_fun.coolshell.cn]

J、分类比较独特，需要注册账号⇒[http://ringzer0team.com/challenge][http_ringzer0team.com_challenge]

K、闯关游戏，挺有意思的，网站做的不错，新手适合⇒[https://backdoor.sdslabs.co/][https_backdoor.sdslabs.co]

L、漏洞利用练习网站⇒[http://smashthestack.org/][http_smashthestack.org]

看点

博客推荐

A、217⇒[http://217.logdown.com/][http_217.logdown.com]

B、蓝莲花⇒[http://www.blue-lotus.net/][http_www.blue-lotus.net] blue-lotus

C、0ops⇒[http://blog.0ops.net/][http_blog.0ops.net]

D、e4f⇒[http://le4f.net/][http_le4f.net]

E、代码疯子?[http://www.programlife.net/][http_www.programlife.net]

F、三叶草安全小组⇒[http://syclover.sinaapp.com/][http_syclover.sinaapp.com]

G、appleU0大大⇒[http://appleu0.sinaapp.com/][http_appleu0.sinaapp.com]

H、LateRain’blog⇒[http://hijacks.in/][http_hijacks.in]

I、独自等待⇒[https://www.waitalone.cn/][https_www.waitalone.cn]

J、余弦⇒[http://evilcos.me/][http_evilcos.me]

K、暗月⇒[http://www.moonsec.com/][http_www.moonsec.com]

L、玄魂⇒[http://www.cnblogs.com/xuanhun/][http_www.cnblogs.com_xuanhun]

M、离别歌⇒[https://www.leavesongs.com/][https_www.leavesongs.com]

N、sky的自留地⇒[http://www.03sec.com/][http_www.03sec.com]

O、jc老师⇒[http://joychou.org/][http_joychou.org]

P、90’s blog⇒[https://www.unhonker.com/][https_www.unhonker.com]

Q、知道创于⇒[http://blog.knownsec.com/][http_blog.knownsec.com]

R、焠安⇒[http://www.sadk.org/][http_www.sadk.org]

S、seay’blog⇒[http://www.cnseay.com/][http_www.cnseay.com]

T、kali中文网⇒[http://www.kali.org.cn/][http_www.kali.org.cn]

U、xiao106347 kali折腾⇒[http://xiao106347.blog.163.com/][http_xiao106347.blog.163.com]

[http_www.freebuf.com_articles_others-articles_36927.html]: http://www.freebuf.com/articles/others-articles/36927.html
[http_blog.idf.cn_2015_02_ctf-field-guide]: http://blog.idf.cn/2015/02/ctf-field-guide/
[https_ctftime.org_event_list_upcoming]: https://ctftime.org/event/list/upcoming
[http_hackinglab.cn]: http://hackinglab.cn/
[http_captf.com]: http://captf.com/
[http_oj.xctf.org.cn]: http://oj.xctf.org.cn/
[http_ctf.3sec.cn]: http://ctf.3sec.cn/
[http_www.ichunqiu.com_tiaozhans]: http://www.ichunqiu.com/tiaozhans
[http_ctf.idf.cn]: http://ctf.idf.cn/
[http_ctf.moonsos.com_pentest]: http://ctf.moonsos.com/pentest
[http_www.hetianlab.com_CTFrace.html]: http://www.hetianlab.com/CTFrace.html
[http_www.shiyanbar.com_ctf]: http://www.shiyanbar.com/ctf/
[https_bctf.cn_challenge]: https://bctf.cn/#/challenge
[http_xss.pkav.net_xss]: http://xss.pkav.net/xss/
[http_xss-quiz.int21h.jp]: http://xss-quiz.int21h.jp/
[http_escape.alf.nu]: http://escape.alf.nu/
[http_redtiger.labs.overthewire.org]: http://redtiger.labs.overthewire.org/
[https_github.com_Audi-1_sqli-labs]: https://github.com/Audi-1/sqli-labs
[http_reversing.kr]: http://reversing.kr/
[http_pwnable.kr]: http://pwnable.kr/
[http_exploit-exercises.com]: http://exploit-exercises.com/
[http_security.cs.rpi.edu_courses_binexp-spring2015]: http://security.cs.rpi.edu/courses/binexp-spring2015/
[http_www.52pojie.cn]: http://www.52pojie.cn
[http_1111.segmentfault.com]: http://1111.segmentfault.com/
[http_monyer.com_game_game1]: http://monyer.com/game/game1/
[http_www.fj543.com_hack]: http://www.fj543.com/hack/
[http_hackgame.blackbap.org]: http://hackgame.blackbap.org/
[http_www.helloisa.com_test]: http://www.helloisa.com/test/
[http_hkyx.myhack58.com]: http://hkyx.myhack58.com/
[http_hackit.sinaapp.com]: http://hackit.sinaapp.com/
[http_bobao.360.cn_news_detail_1100.html]: http://bobao.360.cn/news/detail/1100.html
[http_www.tasfa.cn_index.php_2016_01_29_ctf-tools-2]: http://www.tasfa.cn/index.php/2016/01/29/ctf-tools-2/
[http_forum.cnsec.org_thread-93930-1-1.html]: http://forum.cnsec.org/thread-93930-1-1.html
[http_wololo.net_talk_viewtopic.php_f_27_t_39000]: http://wololo.net/talk/viewtopic.php?f=27&t=39000
[http_bobao.360.cn_ctf]: http://bobao.360.cn/ctf/
[https_github.com_ctfs]: https://github.com/ctfs/
[http_www.secpulse.com_archives_category_exclusive]: http://www.secpulse.com/archives/category/exclusive/
[http_overthewire.org]: http://overthewire.org
[http_www.root-me.org_lang_en]: http://www.root-me.org/?lang=en
[http_www.wechall.net]: http://www.wechall.net
[http_insight-labs.org]: http://insight-labs.org/
[http_wargame.kr]: http://wargame.kr/
[http_canyouhack.it]: http://canyouhack.it/
[http_webhacking.kr]: http://webhacking.kr/
[http_prompt.ml_0]: http://prompt.ml/0
[http_fun.coolshell.cn]: http://fun.coolshell.cn/
[http_ringzer0team.com_challenge]: http://ringzer0team.com/challenge
[https_backdoor.sdslabs.co]: https://backdoor.sdslabs.co/
[http_smashthestack.org]: http://smashthestack.org/
[http_217.logdown.com]: http://217.logdown.com/
[http_www.blue-lotus.net]: http://www.blue-lotus.net/
[http_blog.0ops.net]: http://blog.0ops.net/
[http_le4f.net]: http://le4f.net/
[http_www.programlife.net]: http://www.programlife.net/
[http_syclover.sinaapp.com]: http://syclover.sinaapp.com/
[http_appleu0.sinaapp.com]: http://appleu0.sinaapp.com/
[http_hijacks.in]: http://hijacks.in/
[https_www.waitalone.cn]: https://www.waitalone.cn/
[http_evilcos.me]: http://evilcos.me/
[http_www.moonsec.com]: http://www.moonsec.com/
[http_www.cnblogs.com_xuanhun]: http://www.cnblogs.com/xuanhun/
[https_www.leavesongs.com]: https://www.leavesongs.com/
[http_www.03sec.com]: http://www.03sec.com/
[http_joychou.org]: http://joychou.org/
[https_www.unhonker.com]: https://www.unhonker.com/
[http_blog.knownsec.com]: http://blog.knownsec.com/
[http_www.sadk.org]: http://www.sadk.org/
[http_www.cnseay.com]: http://www.cnseay.com/
[http_www.kali.org.cn]: http://www.kali.org.cn/
[http_xiao106347.blog.163.com]: http://xiao106347.blog.163.com/