Awesome
Welcome to the Wargame Nexus
This is an organized, PR-able list of wargame sites. If you know of a (reasonable) wargame site not on this list (and there are definitely some), shoot me a PR. I have nightly tests to detect sites that have gone down, but if you notice something I missed, open an issue!
You can aggregate your score across many of these sites by registering on WeChall.
Wargames Listing
Legend
- <img src="https://img.shields.io/badge/recommended-yes-green.svg"> recommended wargame
- <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> beginner difficulty
- <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> downloadable challenges
- <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg"> no scoreboard
- <img src="https://img.shields.io/badge/status-degraded-orange.svg"> bitrotted
- <img src="https://img.shields.io/badge/status-dead-red.svg"> dead
- <img src="https://img.shields.io/badge/language-X-orange.svg"> only playable in language X
- <img src="https://img.shields.io/badge/heartbeat-failed-red.svg"> fails to work with the daily heartbeat check, so no promises about being up (but was up last time I checked)
The chals below are listed with recommended ones first, then the rest in alphabetical order.
Beginner
- OverTheWire Bandit <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Leviathan <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- SmashTheStack Blowfish <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
General
- pwn.college <img src="https://img.shields.io/badge/recommended-yes-green.svg"> <img src="https://img.shields.io/badge/difficulty-beginner-green.svg">
- TryHackMe <img src="https://img.shields.io/badge/recommended-yes-green.svg"> <img src="https://img.shields.io/badge/difficulty-beginner-green.svg">
- PicoCTF <img src="https://img.shields.io/badge/recommended-yes-green.svg"> <img src="https://img.shields.io/badge/difficulty-beginner-green.svg">
- root-me <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- W3Challs <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- WeChall <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- archive.ooo <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- 247CTF
- 0x539
- Block Harbor Automotive Cybersecurity
- CodeEngn <img src="https://img.shields.io/badge/language-korean-orange.svg"> <img src="https://img.shields.io/badge/status-dead-red.svg">
- CTFLearn
- CpawCTF2
- CpawCTF <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/language-japanese-orange.svg">
- Defend the Web
- Dreamhack <img src="https://img.shields.io/badge/heartbeat-failed-red.svg">
- Electrica
- elhacker <img src="https://img.shields.io/badge/language-spanish-orange.svg">
- ExploitExercises Main Sequence <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- ExploitExercises Nebula <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- Flagyard
- HackBBS
- Hacking-Challenges <img src="https://img.shields.io/badge/language-german-orange.svg">
- Hackropole <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- HackTheBox
- HackThisSite
- HellBound Hackers
- Komodo CTF
- MAGURO β
- MNCTF <img src="https://img.shields.io/badge/language-japanese-orange.svg">
- Ma's Reversing <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- Mod-X <img src="https://img.shields.io/badge/status-dead-red.svg">
- Net-Force
- NewbieContest <img src="https://img.shields.io/badge/language-french-orange.svg">
- Open Security Training <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg">
- Open Security Training 2 <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Semtex
- PWN.TN
- Rankk.org
- Revolution Elite
- RingZer0Team Online CTF
- SmashTheStack Logic <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- SuNiNaTaS <img src="https://img.shields.io/badge/language-korean-orange.svg">
- ThisisLegal.com
- TryThis0ne.com
- VulnHub <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- YEHD 2015 CTF <img src="https://img.shields.io/badge/language-japanese-orange.svg">
- akictf <img src="https://img.shields.io/badge/status-degraded-orange.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg">
- hacker.org
- ksnctf
- World of Wargame <img src="https://img.shields.io/badge/language-spanish-orange.svg">
- 柚子胡椒CTF <img src="https://img.shields.io/badge/language-japanese-orange.svg">
Binary Pwning
- pwnable.kr <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- pwnable.tw <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- ExploitExercises Fusion <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- ExploitExercises Phoenix <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- HackSys Extreme Vulnerable Driver <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- IO64 <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- IO <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- Microcorruption
- Nightmare <img src="https://img.shields.io/badge/style-offline-lightgrey.svg">
- OverTheWire Behemoth <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Drifter <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Manpage <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Maze <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Narnia <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Unomo <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Vortex <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- ROP Emporium
- ROP.sh <img src="https://img.shields.io/badge/status-degraded-orange.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg">
- pwnable.xyz
Binary Reversing
- reversing.kr <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- challenges.re <img src="https://img.shields.io/badge/difficulty-beginner-green.svg">
- crackmes.de (mirror) <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- crackmes.one
- IOLI64 <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- LigerLabs <img src="https://img.shields.io/badge/style-offline-lightgrey.svg">
Prompt Injection
Mobile
Web
- alert(1) to win
- websec.fr <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- webhacking.kr <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- 0xf.at
- Google Gruyere <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- HackerTest
- HackingHub <img src="https://img.shields.io/badge/heartbeat-failed-red.svg">
- Lords of SQLInjection
- OverTheWire Natas <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OWASP Juice Shop <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- PortSwigger Web Security Academy
- RedTiger's Hackit
- Stereotyped Challenges <img src="https://img.shields.io/badge/status-degraded-orange.svg"> <img src="https://img.shields.io/badge/style-offline-lightgrey.svg">
- Wizer CTF <img src="https://img.shields.io/badge/difficulty-beginner-green.svg">
- XSS Game
- XSS PwnFunction
- XSS game area
- YesWeHack DOJO
Crypto
- Crypto Hack <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- id0-rsa <img src="https://img.shields.io/badge/recommended-yes-green.svg">
- Matasano Cryptopals <img src="https://img.shields.io/badge/recommended-yes-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- OverTheWire Krypton <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- Brain Quest
- Énigmes À Thématiques <img src="https://img.shields.io/badge/language-french-orange.svg">
- Ethernaut (Solidity) <img src="https://img.shields.io/badge/difficulty-beginner-green.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- Gekkó
- MysteryTwister
- try to decrypt
Forensics
- Digital Forensics Lab <img src="https://img.shields.io/badge/style-offline-lightgrey.svg"> <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
Cloud
- flAWS <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- flAWS 2 <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
Unsorted
- CTF 101
- InterruptLabs Challenges
- IO07 <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- SANS Holiday Hack Challenge 2023
- SmashTheStack Amateria <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- SmashTheStack Tux <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg">
- Viblo
- runZero Coin Challenge
Recon / OSINT
- ae27ff <img src="https://img.shields.io/badge/heartbeat-failed-red.svg">
Not Security
Developing some core CS skills can be useful for security as well!
- Tensor Puzzles
- SadServers
- PyDéfis <img src="https://img.shields.io/badge/language-french-orange.svg">
- Prompt Riddle
Gone, but not forgotten
These sites have gone offline (or taken their challenges offline). I track them here to periodically check for their return (which does happen sometimes!).
- Backdoor
- Bright Shadows <img src="https://img.shields.io/badge/status-dead-red.svg">
- CHALLENGE LAND <img src="https://img.shields.io/badge/status-dead-red.svg">
- ctfs.me <img src="https://img.shields.io/badge/status-dead-red.svg">
- HackBurger <img src="https://img.shields.io/badge/status-dead-red.svg">
- HackMe <img src="https://img.shields.io/badge/status-dead-red.svg">
- HallsOfValhalla <img src="https://img.shields.io/badge/status-dead-red.svg">
- hax.tor <img src="https://img.shields.io/badge/status-degraded-orange.svg">
- IOarm <img src="https://img.shields.io/badge/scoring-no-lightgrey.svg"> <img src="https://img.shields.io/badge/status-dead-red.svg">
- The Enigma Group <img src="https://img.shields.io/badge/status-dead-red.svg">
- WTHack <img src="https://img.shields.io/badge/status-dead-red.svg">
- MMA CTF <img src="https://img.shields.io/badge/language-japanese-orange.svg"> <img src="https://img.shields.io/badge/status-dead-red.svg">
- HackerGateway <img src="https://img.shields.io/badge/status-dead-red.svg">
- The OSINT Lab
Other Indexes
This isn't the only wargame index out there! Others are:
Credit
I acquired the links here over a very long career. At some point, I started noting down resources that led me to these links. They are:
- https://medium.com/@a.hilton83/learning-resources-a0a859bf9dbd
- http://captf.com/practice-ctf/
- http://www.wechall.net/sites.php
- http://ctf.forgottensec.com/wiki/index.php?title=Main_Page
- https://github.com/carpedm20/awesome-hacking
- https://csea-iitb.github.io/IITBreachers-wiki/2020/08/01/Hacking-Sites.html