Essential resources for learning through CTFs

Capture the Flag (CTF) are competitive cybersecurity challenges where participants solve puzzles or exploit vulnerabilities to retrieve hidden “flags” and earn points.

At their core they are just gamified learning with the potential to break down some interview gates for entry level employment/internships

Incorporating CTF-style challenges into your learning journey transforms rote drills into exploratory problem-solving, helping you internalize concepts by applying them to realistic tasks. By mixing bite-sized shell quizzes with full-scale pentest labs, learners of all levels can identify gaps in understanding, collaborate with peers, and build confidence in a risk-free environment. The following table collates our recommended resources, complete with direct links, categories, and notes on their best use.

Learning Resource

  • Irregularpedia: Learning – a wiki page of curated tutorials, challenges, and community tips specifically available to service members and veterans across shell, security, and development topics

The IrregularChat Capture the Flag compete to become an ‘elder’ while learning about the community in this scavenger hunt / capture the flag

Youtube Video about CTFs

  • Building a DEF CON-Winning Team (YouTube) – “Do you want to know how to build a top-ranked competitive hacking team? It’s all about the system… Learn our proven system for building an elite team of hackers that win DEF CON.”

Key Shell & CTF Resources

Resource Link Category Notes
Linux Terminal Game Linux Terminal Game Interactive Shell Quiz Definition-based command prompts.
CMDChallenge https://cmdchallenge.com/ One-liner Bash Puzzles Timed challenges for text-processing utilities.
Linux Upskill Challenge https://linuxupskillchallenge.org/ Structured Month-Long Daily sysadmin-focused tasks via Reddit community.
OverTheWire Bandit OverTheWire: Bandit Wargame Beginner-friendly shell navigation labs.
Hack The Box https://www.hackthebox.com/ Pentesting Platform Realistic labs & certification tracks.
TryHackMe https://tryhackme.com/ Guided Learning Paths Browser-based rooms from beginner to advanced.
apsdehal/awesome-ctf GitHub - apsdehal/awesome-ctf: A curated list of CTF frameworks, libraries, resources and softwares CTF Frameworks & Tools Community-curated list of CTF tools & libraries.
devploit/awesome-ctf-resources GitHub - devploit/awesome-ctf-resources: A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩 CTF Resources Broad selection of tools & tutorials.
nirvikagarwal/awesome-ctf-cheatsheet GitHub - nirvikagarwal/awesome-ctf-cheatsheet: CTF Cheatsheet CTF Cheat Sheet Tips & common commands for shell-based CTFs.
uppusaikiran/awesome-ctf-cheatsheet GitHub - uppusaikiran/awesome-ctf-cheatsheet: CTF Cheatsheet CTF Cheat Sheet Curated strategies to solve online CTFs & HTB machines.
MJafarMashhadi/CTF GitHub - MJafarMashhadi/CTF: 🚩 A cheatsheet of useful tools and shell scripts that come in handy in capture the flag contests. Cheat Sheet Useful tools and shell scripts for CTF contests.
ByamB4/Common-CTF-Challenges GitHub - ByamB4/Common-CTF-Challenges: Common CTF Challenges is a collection of tools and resources to help individuals improve their Capture the Flag (CTF) skills. Cover a wide range of challenges, from cryptography to reverse engineering. CTF Toolkit Tools & resources across cryptography, reversing, and more.
realvoidgojo/CTF-Challenges GitHub - realvoidgojo/CTF-Challenges: Capture the Flag (CTF) is a cybersecurity competition where participants solve challenges to find "flags." There are two main types: Jeopardy-style, with tasks in cryptography, web security, forensics, etc., and Attack-Defense, where teams secure their systems and attack others. CTFs develop skills in hacking, problem-solving, and teamwork. Curation Curated list of CTF challenges across platforms.
CKSHetty4/Linux-Shell GitHub - CKShetty4/Linux-Shell: This repository contains solutions to various Linux shell programming problems from HackerRack. It covers a range of challenges, from basic bash scripting to complex problems involving text processing and advanced command-line tools like awk, grep, and sed. Shell Scripting Practice HackerRank Linux shell scripting solutions.

Common Questions

Q: Is there a certain CTF that pairs best with a particular academic pathway?

A: Yes—different CTF formats map naturally to different curricula. Jeopardy-style CTFs (e.g., PicoCTF) build foundational skills for introductory computer science or cybersecurity courses, while attack-and-defend CTFs (e.g., collegiate DEF CON qualifiers) complement network security and operating systems classes. OSINT-focused CTFs (e.g., Trace Labs OSINT Search Party) align with intelligence or investigative journalism programs .

Q: Which CTF format is best for a networks/operating systems course?

A: Attack-and-defend CTFs such as those in DEF CON Quals or University CTFs immerse students in real-time service exploitation and defense, mirroring hands-on lab work in network and OS classes.

Q: What CTFs work well for web application security learning?

A: Jeopardy-style web challenges on platforms like Hack The Box (Web category) and TryHackMe Web rooms, as well as open-source projects like OWASP Juice Shop, directly reinforce concepts in web security modules.

Q: How can I practice OSINT skills academically?

A: Participate in OSINT CTFs—such as Trace Labs OSINT Search Party or xElessaway’s OSINT CTF repository—to hone open-source intelligence techniques for intelligence analysis or journalism courses .

Q: How do I build a top-ranked competitive hacking team?

A: Think like a sports coach: scout talent through feeder events, recruit for complementary skills, train via targeted study tracks, and simulate tournament conditions. Watch our proven system for DEF CON champions here: https://www.youtube.com/watch?v=6vj96QetfTg