This is an organized, PR-able list of wargame sites. If you know of a (reasonable) wargame site not on this list (and there are definitely some), shoot me a PR. I have nightly tests to detect sites that have gone down, but if you notice something I missed, open an issue!
You can aggregate your score across many of these sites by registering on WeChall.
recommended wargame
beginner difficulty
downloadable challenges
no scoreboard
bitrotted
dead
only playable in language X
fails to work with the daily heartbeat check, so no promises about being up (but was up last time I checked)
The chals below are listed with recommended ones first, then the rest in alphabetical order.
- pwn.college
- PicoCTF
- root-me
- W3Challs
- WeChall
- archive.ooo
- 247CTF
- 0x539
- Block Harbor Automotive Cybersecurity
- CodeEngn
- CTFLearn
- CpawCTF2
- CpawCTF
- Defend the Web
- Dreamhack
- Electrica
- elhacker
- ExploitExercises Main Sequence
- ExploitExercises Nebula
- Flagyard
- HackBBS
- Hacking-Challenges
- Hackropole
- HackThisSite
- HellBound Hackers
- Komodo CTF
- MAGURO β
- MNCTF
- Ma's Reversing
- Mod-X
- Net-Force
- NewbieContest
- Open Security Training
- Open Security Training 2
- OverTheWire Semtex
- PWN.TN
- Rankk.org
- Revolution Elite
- RingZer0Team Online CTF
- SmashTheStack Logic
- SuNiNaTaS
- ThisisLegal.com
- TryThis0ne.com
- VulnHub
- YEHD 2015 CTF
- akictf
- hacker.org
- ksnctf
- World of Wargame
- 柚子胡椒CTF
- pwnable.kr
- pwnable.tw
- ExploitExercises Fusion
- ExploitExercises Phoenix
- HackSys Extreme Vulnerable Driver
- IO64
- IO
- Microcorruption
- Nightmare
- OverTheWire Behemoth
- OverTheWire Drifter
- OverTheWire Manpage
- OverTheWire Maze
- OverTheWire Narnia
- OverTheWire Unomo
- OverTheWire Vortex
- ROP Emporium
- ROP.sh
- pwnable.xyz
- alert(1) to win
- websec.fr
- webhacking.kr
- 0xf.at
- Google Gruyere
- HackerTest
- HackingHub
- Lords of SQLInjection
- OverTheWire Natas
- OWASP Juice Shop
- PortSwigger Web Security Academy
- RedTiger's Hackit
- Wizer CTF
- XSS Game
- XSS PwnFunction
- XSS game area
- YesWeHack DOJO
- Crypto Hack
- id0-rsa
- Matasano Cryptopals
- OverTheWire Krypton
- Brain Quest
- Énigmes À Thématiques
- Ethernaut (Solidity)
- Gekkó
- MysteryTwister
- try to decrypt
- CTF 101
- InterruptLabs Challenges
- IO07
- SANS Holiday Hack Challenge 2023
- SmashTheStack Amateria
- SmashTheStack Tux
- Viblo
- runZero Coin Challenge
Developing some core CS skills can be useful for security as well!
These sites have gone offline (or taken their challenges offline). I track them here to periodically check for their return (which does happen sometimes!).
- Backdoor
- Bright Shadows
- CHALLENGE LAND
- ctfs.me
- HackBurger
- HackMe
- HallsOfValhalla
- hax.tor
- IOarm
- Prompt Riddle
- Stereotyped Challenges
- The Enigma Group
- WTHack
- MMA CTF
- HackerGateway
- The OSINT Lab
This isn't the only wargame index out there! Others are:
I acquired the links here over a very long career. At some point, I started noting down resources that led me to these links. They are:
- https://medium.com/@a.hilton83/learning-resources-a0a859bf9dbd
- http://captf.com/practice-ctf/
- http://www.wechall.net/sites.php
- http://ctf.forgottensec.com/wiki/index.php?title=Main_Page
- https://github.com/carpedm20/awesome-hacking
- https://csea-iitb.github.io/IITBreachers-wiki/2020/08/01/Hacking-Sites.html