Welcome to the Wargame Nexus
This is an organized, PR-able list of wargame sites. If you know of a (reasonable) wargame site not on this list (and there are definitely some), shoot me a PR. I have nightly tests to detect sites that have gone down, but if you notice something I missed, open an issue!
You can aggregate your score across many of these sites by registering on WeChall.
Wargames Listing
Legend
recommended wargame
beginner difficulty
downloadable challenges
no scoreboard
bitrotted
dead
only playable in language X
fails to work with the daily heartbeat check, so no promises about being up (but was up last time I checked)
The chals below are listed with recommended ones first, then the rest in alphabetical order.
Beginner
General
- pwn.college
- PicoCTF
- root-me
- W3Challs
- WeChall
- archive.ooo
- 247CTF
- 0x539
- Block Harbor Automotive Cybersecurity
- BUUCTF
- CodeEngn
- CTFLearn
- CpawCTF2
- CpawCTF
- Defend the Web
- Dreamhack
- Electrica
- elhacker
- ExploitExercises Main Sequence
- ExploitExercises Nebula
- Flagyard
- HackBBS
- Hacking-Challenges
- Hackropole
- HackThisSite
- HellBound Hackers
- Komodo CTF
- MAGURO β
- MNCTF
- Ma’s Reversing
- Mod-X
- Net-Force
- NewbieContest
- Open Security Training
- Open Security Training 2
- OverTheWire Semtex
- PWN.TN
- Rankk.org
- Revolution Elite
- RingZer0Team Online CTF
- SmashTheStack Logic
- SuNiNaTaS
- ThisisLegal.com
- TryThis0ne.com
- VulnHub
- YEHD 2015 CTF
- akictf
- hacker.org
- ksnctf
- World of Wargame
- 柚子胡椒CTF
“Box”-style Wargames
Binary Pwning
- pwnable.kr
- pwnable.tw
- ExploitExercises Fusion
- ExploitExercises Phoenix
- HackSys Extreme Vulnerable Driver
- IO64
- IO
- Microcorruption
- Nightmare
- OverTheWire Behemoth
- OverTheWire Drifter
- OverTheWire Manpage
- OverTheWire Maze
- OverTheWire Narnia
- OverTheWire Unomo
- OverTheWire Vortex
- ROP Emporium
- ROP.sh
- pwnable.xyz
Binary Reversing
Prompt Injection
Mobile
Web
- alert(1) to win
- websec.fr
- webhacking.kr
- 0xf.at
- Google Gruyere
- HackerTest
- HackingHub
- Lords of SQLInjection
- OverTheWire Natas
- OWASP Juice Shop
- PortSwigger Web Security Academy
- RedTiger’s Hackit
- Wizer CTF
- XSS Game
- XSS PwnFunction
- XSS game area
- YesWeHack DOJO
Crypto
- Crypto Hack
- id0-rsa
- Matasano Cryptopals
- OverTheWire Krypton
- Brain Quest
- Énigmes À Thématiques
- Ethernaut (Solidity)
- Gekkó
- MysteryTwister
- try to decrypt
Forensics
Cloud
Unsorted
- CTF 101
- InterruptLabs Challenges
- IO07
- SANS Holiday Hack Challenge 2023
- SmashTheStack Amateria
- SmashTheStack Tux
- Viblo
- runZero Coin Challenge
Recon / OSINT
Not Security
Developing some core CS skills can be useful for security as well!
Gone, but not forgotten
These sites have gone offline (or taken their challenges offline). I track them here to periodically check for their return (which does happen sometimes!).
- Backdoor
- Bright Shadows
- CHALLENGE LAND
- ctfs.me
- HackBurger
- HackMe
- HallsOfValhalla
- hax.tor
- IOarm
- Prompt Riddle
- Stereotyped Challenges
- The Enigma Group
- WTHack
- MMA CTF
- HackerGateway
- The OSINT Lab
Other Indexes
This isn’t the only wargame index out there! Others are:
Credit
I acquired the links here over a very long career. At some point, I started noting down resources that led me to these links. They are:
- https://medium.com/@a.hilton83/learning-resources-a0a859bf9dbd
- http://captf.com/practice-ctf/
- http://www.wechall.net/sites.php
- http://ctf.forgottensec.com/wiki/index.php?title=Main_Page
- https://github.com/carpedm20/awesome-hacking
- https://csea-iitb.github.io/IITBreachers-wiki/2020/08/01/Hacking-Sites.html