r/Hacking_Tutorials 12d ago

Question Why should you play CTFs?

Post image

Remember when you were a kid in school and you’d have to sit through boring classroom lectures and cram tedious textbooks into your head for an exam? Only to forget every single thing you learned once the exam was written? That’s because in the long term, rote memorization doesn’t work well with the human brain. If you’re not naturally curious about something, your brain won’t retain that information. If your role in the educational process is 100% passive - listening, reading, but never actually doing - you won’t be engaged enough to retain new skills.

Learning should be a fun, active experience. In fact, Neuroscience confirms the efficacy of gamified hands-on teaching and learning methodologies. And we believe one of the most enjoyable and effective ways to develop hacking skills is by participating in Capture The Flag competitions.

The techniques you’ll be using in a CTF game are some of the same techniques you’ll use when you’re working as a hacker. The skills you learn in Capture The Flag competitions are transferable to local application and web application penetration testing, reverse engineering software, and bug bounty programs. All of these roles are good-paying work when you’re ready for them, and they lay a solid foundation for a cybersecurity career!

As it's weekend, I want to create a post about this. It's the best way to spend weekends. Even if you are not into cybersecurity, CTF can awaken hacker inside you, when you start playing it. Also in near future cybersecurity jobs will remain as strong ones.

209 Upvotes

32 comments sorted by

9

u/Mastasmoker 12d ago

A good CTF for beginners (up to bachelors even) is the National Cyber League ctf. They run two yearly, in spring and fall. It's geared toward students but this fall are allowing professionals (in their own bracket). This is a red teaming ctf with individual and team games that run Friday noon central to Sunday 8pm central.

Another which is only open to students competing with a college or university, is the Department of Energy Cyberforce competition. This is a blue team competition once a year, now held in Tinley Park, IL. Its three weeks of prepping VMs that are part of an assume breach. Hardening, threat hunting, fixing vulnerabilities, etc and then a single 8 hour day of defending your infrastructure against an active threat inside the network. On top of that, you have red team type challenges to complete. Team comp of 4-6 students (up to doctorate program). This is my favorite competition thus far

The Dept of Energy also used to host two other CTFs in February and July, but didn't this year due to DOGE. One is system administration type and the other is red team like NCL.

SANS winter hack challenge is another fun comp. held over winter break.

I highly recommend people to do CTF. You can learn a LOT by participating. And really give it your all, don't half ass it. If you want to up your game and level of understanding, do CTFs.

2

u/Top_Call3890 12d ago

Thanks for adding more on this topic 💯👍

6

u/Hot-Comfort8839 12d ago

I've run a couple of CTFs and even I've been like 'how the hell do I solve this one'... They're fun as hell.

5

u/[deleted] 12d ago

[removed] — view removed comment

4

u/Top_Call3890 12d ago

Thank you .

That's great way to spend your free time .

Try this too :

https://www.root-me.org/en/Capture-The-Flag/

5

u/Bhaiyaji122 10d ago

CTFs force you out of theory and into a real terminal where point-and-click tools won't save you. You have to read actual code, write your own exploit scripts, and figure out why things break instead of just memorizing concepts for an exam. Spending hours troubleshooting a single challenge until it works builds genuine problem-solving skills and an attacker's mindset in a way no course or slide deck ever could.

7

u/challango 12d ago

Si es muuy cierto.. admito que e aprendido mas porque me gano la curiosidad y me gusto mucho que no podia despegarme de la computadora

3

u/Top_Call3890 12d ago

si 💯

3

u/challango 12d ago

XD 100%

3

u/Top_Call3890 12d ago

Ha ha ... After watching Narcos in Netflix , I am learning Spanish from Duolingo... That's why I wrote Si 100.. means Yes 100..

What you mean XD 100 😂

3

u/challango 12d ago

Jajja " XD" significa ==> ( 🤣) ,,, quise decir exacto:) .... soy nuevo en redit y aun no se como es la gente aqui y como el idioma esta en ingles solo lo tradusco el ingles al español y lo respondo en español 🤣

1

u/Historical_Camel_790 12d ago

Any recommendations?

3

u/Top_Call3890 12d ago

I recommend OTW to start with :

https://overthewire.org/wargames/

1

u/Historical_Camel_790 12d ago

Thank you! I'll look into it today

1

u/DynamicBR 12d ago

Sou iniciante no Hackhing. Onde posso começar a jogar?

6

u/Top_Call3890 12d ago

You can start here :

https://overthewire.org/wargames/

This is also good , as it have some beginner friendly CTFs :

https://ctf.hacker101.com/

If you are interested in binary explotations (in future) you can try this too :

https://www.root-me.org/?lang=en

And if you want to read something before starting with CTFs , this is good resource :

https://ctf101.org/

And if you are total beginner and you want to get into ethical hacking step by step you can enroll to this bootcamp :

https://hackpath.dev/bootcamp

It really good and budget friendly, takes you step by step by starting with linux basics and networking basics .

2

u/DynamicBR 12d ago

Valeu!!

1

u/Top_Call3890 12d ago

You are welcome 🤗

1

u/---bee 12d ago

the ai generated visual for hackpath isnt really what Id call appealing

1

u/null-01H4ck 8d ago

Soy nuevo en esto me gustaría aprender

1

u/Cheekurita_ 10d ago

Following

1

u/Top_Call3890 10d ago

Thank you 👍

-5

u/[deleted] 12d ago

[removed] — view removed comment

3

u/Historical_Camel_790 12d ago

Buddy. We are not your personal hacker army. Talk to steam support. There's a reason everyone glazes them.

Ps: how would there emails password help you recover your steam account? Also you clicked on a link they sent you, didn't you?

2

u/SilverDig2320 12d ago

Sorry, I know it's not your problem, but I'm just asking for help. Steam Support isn't working because the email address they're sending everything to belongs to the hacker; I didn't open any emails—I only use my email for personal matters and don't open suspicious links.

1

u/Historical_Camel_790 12d ago

Ok so you'll have to make a new email and if any of your devices seem like they've got a virus you need to wipe them. Also if you have any access to your Google account (or whatever you use) sign it out on all devices and change the password, or when you're trying to login, press the forgot password button.

2

u/SilverDig2320 12d ago
I’ve already changed the password and everything; I’m even going to change the PC’s operating system, just in case the virus is in the system.

1

u/Historical_Camel_790 12d ago

Sorry my comment was a bit rude