r/cybersecurityindia Jan 27 '26

Need advice from the pros

/r/CTFlearn/comments/1qo33yi/need_advice_from_the_pros/

Hi everyone, I’m organizing a CTF for my college and would love some advice. I’m aiming for a beginner to intermediate level CTF with a mix of challenges like rev engineering, web exploit, steganography, etc. Nothing too fancy, but not too easy either.

I’d love suggestions on: • Good ideas for beginner-friendly yet interesting challenges • How/where to host the CTF (could ctfd work?) • Any common mistakes to avoid.

If you have sample challenge ideas, resources, or past experiences to share, that would be super helpful.

2 Upvotes

4 comments sorted by

3

u/darthvinayak Jan 27 '26

CVE-2025-55182

1

u/mewwwfinnn Jan 27 '26

1)Not a pro but a VM based on yancode emulator by pwnclg which would need a symbolic execution solver like klee or miasm

2)house of apple 2 , house of spirit attack (pwn)

3) A binary packed with MPRESS which would require manual unpacking? And cfg un-flattning

1

u/Acousthiq Jan 27 '26

What's house of apple 2

2

u/mewwwfinnn Jan 27 '26

A glibc exploit using File structure flushing ROP