CTF Handbook

Home

CTF Handbook

Home Home
Table of contents
- Contributions
Intro
Intro
Forensics
Forensics
- Overview
- File Formats
  File Formats
  - What are File Formats
- Metadata
  Metadata
  - What is Metadata
- Network Analysis
  Network Analysis
  - What is Wireshark
  - What is Packet Capture
- Steganography
  Steganography
  - What is Steganography
- Disk Imaging
  Disk Imaging
  - What is Disk Imaging
- Memory Forensics
  Memory Forensics
  - What is Memory Forensics
- Hex Editors
  Hex Editors
  - What is a Hex Editor
Cryptography
Cryptography
- Overview
- XOR
  XOR
  - What is XOR
- Substitution Cipher
  Substitution Cipher
  - What is a Substitution Cipher
  - Caesar Cipher/ROT 13
- Vigenere Cipher
  Vigenere Cipher
  - What is a Vigenere Cipher
- Hashing Functions
  Hashing Functions
  - What are Hashing Functions
- Modes of Operation
  Modes of Operation
  - What are Block Ciphers
  - What are Stream Ciphers
- RSA
  RSA
  - What is RSA
Web Exploitation
Web Exploitation
- Overview
- SQL Injection
  SQL Injection
  - What is SQL Injection
- Command Injection
  Command Injection
  - What is Command Injection
- Directory Traversal
  Directory Traversal
  - What is Directory Traversal
- Cross Site Request Forgery
  Cross Site Request Forgery
  - What is Cross Site Request Forgery
- Cross Site Scripting (XSS)
  Cross Site Scripting (XSS)
  - What is Cross Site Scripting
- Server Side Request Forgery
  Server Side Request Forgery
  - What is Server Side Request Forgery
- PHP
  PHP
  - What is PHP?
Reverse Engineering
Reverse Engineering
- Overview
- Assembly/Machine Code
  Assembly/Machine Code
  - What is Assembly/Machine Code
- The C Programming Language
  The C Programming Language
  - What is C
- Disassemblers
  Disassemblers
  - What are Disassemblers
- Debuggers
  Debuggers
  - What is GDB
- Decompilers
  Decompilers
  - What are Decompilers
Binary Exploitation
Binary Exploitation
- Overview
- Registers
  Registers
  - What are Registers
- The Stack
  The Stack
  - What is the Stack
- Calling Conventions
  Calling Conventions
  - What are Calling Conventions
- Global Offset Table (GOT)
  Global Offset Table (GOT)
  - What is the GOT
- Buffers
  Buffers
  - What are Buffers
  - Buffer Overflow
- Return Oriented Programming (ROP)
  Return Oriented Programming (ROP)
  - What is ROP
- Binary Security
  Binary Security
- The Heap
  The Heap
  - What is the Heap
  - Heap Exploitation
- Format String Vulnerability
  Format String Vulnerability
  - What is a Format String Vulnerability
FAQ
FAQ

Capture The Flag 101 🚩

Welcome to CTF101, a site documenting the basics of playing Capture the Flags. This guide was written and maintained by the OSIRIS Lab at New York University in collaboration with CTFd.

In this handbook you'll learn the basics™ behind the methodologies and techniques needed to succeed in Capture the Flag competitions.

Ready? Let's go

Contributions

Thank you to our incredible contributors. They work hard to keep this project open and available to everyone.

This project is open sourced under the MIT Open Source License. For more information, check out the MIT License page.

Info

If you're interested in contributing to make this site great, please check out our Contributing section on Github!