A practical, beginner-friendly guide to Crypto, Web, Pwn, Reverse, Misc, Forensics, Blockchain and AI Security.
Classical ciphers, symmetric crypto, RSA, ECC, hashing, protocols, side channels and post-quantum cryptography.
Start learning
SQL injection, XSS, SSRF, SSTI, deserialization, JWT and common authentication bypasses.
View content
Stack overflows, format strings, heap exploitation, ROP and sandbox escapes.
View content
Static analysis, dynamic debugging, unpacking and algorithm recovery.
View content
Encoding, steganography, traffic analysis and general problem-solving tricks.
View content
Disk images, memory dumps, logs and file recovery.
View content
Smart contract vulnerabilities, the EVM execution model and on-chain security.
View content
Prompt injection, jailbreaks, adversarial examples, model extraction and agent security.
View content
The handbook is organized by CTF category. Each category is built from beginner-friendly articles and will keep growing.
The Crypto handbook is available now. Other categories are being written.
