CTF Wiki

Introduction

中文 English

Welcome to CTF Wiki！

CTF (Capture The Flag) started from DEFCON CTF, a competitive game among computer security enthusiasts, originally hosted in 1996.

CTF covers a wide range of fields. Along with the evolving security technology, the difficulty of CTF challenges is getting harder and harder. As a result, the learning curve for beginners is getting steeper. Most online information is scattered and trivial. Beginners often don't know how to systematically learn CTF, which requires a lot of work and effort.

In order to let those people who are interested in CTFs start easily, in October 2016, CTF Wiki was established on Github. Along with gradually improved content over time, CTF Wiki has received lots of appreciation from security enthusiasts, many of those are guys that we think we would never meet.

As a freedom site, primarily focusing on recent CTFs, CTF Wiki introduces the knowledge and techniques in all aspects of CTF to make it easier for beginners to learn CTF.

Now, CTF Wiki mainly contains the basic skills for CTF, but we are working hard to improve the following contents.

• Advanced skills used in CTF
• Special topics appearing in CTF

For the above-mentioned parts to be improved, please refer to Projects which details what are planned.

Although now CTF Wiki mainly focus CTF, it is not strictly limited to CTF topics. In the future, CTF Wiki will include

• Tools used in security research
• Increased discussion of security in the world

In addition, given the following two points

• Information about technology should be openly shared.
• As new techniques are always being developed, old techniques will start to fade over time and they should be replaced with new techniques.

Therefore, CTF Wiki will never publish books.

Finally, originating from the community, as an independent organization, CTF Wiki advocates freedom of knowledge, will never be commercialized, and will always maintain the character of independence and freedom.

How to build？

CTF Wiki uses mkdocs to show its contents. And it is deployed at https://ctf-wiki.org.

It can also be deployed locally, with the following steps:

# 1. clone
git clone https://github.com/ctf-wiki/ctf-wiki.git
# 2. requirements
pip install -r requirements.txt
# generate static file in site/
python3 scripts/docs.py build-all
# deploy at http://127.0.0.1:8008
python3 scripts/docs.py serve

A local instance of mkdocs is dynamically updated, for instance when a markdown file is modified, the corresponding page will be modified too.

If you just want to view it statically, try Docker!

docker run -d --name=ctf-wiki -p 4100:80 ctfwiki/ctf-wiki

And then access http://localhost:4100/ .

How to practice？

Firstly, learn some basic security knowledge through online reading.

Secondly, CTF Wiki has two sister projects.

• All of the challenges that are mentioned are in the ctf-challenges repository, you can locate them with their corresponding category.
• The tools mentioned in the CTF Wiki are constantly added to the ctf-tools repository.

How to make CTF Wiki Better？

We welcome to write content for the wiki and share what you have learned.

Before you decide to contribute content, please read CONTRIBUTING.

Thank you to all the people who have already contributed to CTF Wiki.

What can you get?

• Ability to learn new things quickly
• Different ways of thinking
• A love for solving problems
• Interesting security techniques
• Memorable and enriching experience

Before reading the Wiki, we hope to give you some advice:

• Learn to ask smart-questions .
• Learn to use Google Search for self-improvement.
• Be good at least one programming language, such as Python.
• Practice is the most important learning tool.
• Maintain the passions and desire to learn about new techniques.

The security circle is small and the areas of exploration is vast. Let's get started with CTF Wiki!

Introduction

中文 English

欢迎来到 CTF Wiki。

CTF（Capture The Flag，夺旗赛）起源于 1996 年 DEFCON 全球黑客大会，是网络安全爱好者之间的竞技游戏。

CTF 竞赛涉及众多领域，内容繁杂。与此同时，安全技术的发展速度越来越快，CTF 题目的难度越来越高，初学者面对的门槛越来越高。而网上资料大都零散琐碎，初学者往往并不知道该如何系统性地学习 CTF 相关领域的知识，常需要花费大量时间，苦不堪言。

为了使得热爱 CTF 的小伙伴们更好地入门 CTF，2016 年 10 月份，CTF Wiki 在 Github 有了第一次 commit。随着内容不断完善，CTF Wiki 受到了越来越多安全爱好者的喜爱，也渐渐有素未谋面的小伙伴们参与其中。

作为一个自由的站点，围绕 CTF 近几年赛题，CTF Wiki 对 CTF 中的各个方向的知识进行介绍，以便于初学者更好地学习 CTF 相关的知识。

目前，CTF Wiki 主要包含 CTF 各大方向的基础知识，正在着力完善以下内容

• CTF 竞赛中的进阶知识
• CTF 竞赛中的优质题目

关于上述部分待完善内容，请参见 CTF Wiki 的 Projects，详细列举了正在做的事情以及待做事项。

虽然 CTF Wiki 基于 CTF，却不会局限于 CTF。在未来，CTF Wiki 将会

• 介绍安全研究中的工具
• 更多地与安全实战结合

此外，鉴于以下两点

• 技术应该以开放的方式分享
• 安全攻防技术在快速迭代更新，在面对新的防御技术时，旧的攻击技术随时可能失效

因此，CTF Wiki 永远不会出版书籍。

最后，CTF Wiki 源于社区，作为独立的组织，提倡知识自由，在未来也绝不会商业化，将始终保持独立自由的性质。

How to build？

本文档目前采用 mkdocs 部署在 https://ctf-wiki.org。

本项目可以直接部署在本地，具体方式如下：

# 1. clone
git clone https://github.com/ctf-wiki/ctf-wiki.git
# 2. requirements
pip install -r requirements.txt
# generate static file in site/
python3 scripts/docs.py build-all
# deploy at http://127.0.0.1:8008
python3 scripts/docs.py serve

mkdocs 本地部署的网站是动态更新的，即当你修改并保存 md 文件后，刷新页面就能随之动态更新。

你只是想本地浏览，并不想修改文档？试试 Docker 吧！

docker run -d --name=ctf-wiki -p 4100:80 ctfwiki/ctf-wiki

随后即可在浏览器中访问 http://localhost:4100/ 阅读 CTF Wiki 。

How to practice？

首先，通过在线阅读来学习一些基本的安全知识。

其次，CTF Wiki 还有两个姊妹项目

• CTF Wiki 中涉及的题目在 ctf-challenges 仓库中，请根据对应的分类自行寻找。
• CTF Wiki 中涉及的工具会不断补充到 ctf-tools 仓库中。

How to make CTF Wiki Better？

我们非常欢迎你为 Wiki 编写内容，将自己的所学所得与大家分享。我们期待着你的加入！

在你决定要贡献内容之前，请你务必看完 CONTRIBUTING。其中包含了详细的贡献方式。

非常感谢一起完善 CTF Wiki 的小伙伴们

What can you get?

• 快速学习新事物的能力
• 不一样的思考方式
• 乐于解决问题的心
• 有趣的安全技术
• 充实奋斗的时光

在阅读 Wiki 之前，我们希望能给予你几点建议：

• 学习 提问的智慧
• 善用 Google 搜索能帮助你更好地提升自己
• 至少掌握一门编程语言，比如 Python
• 动手实践比什么都要管用
• 保持对技术的好奇与渴望并坚持下去

世界很大，互联网让世界变小，真的黑客们应该去思考并创造，无论当下是在破坏还是在创造，记住，未来，那条主线是创造的就对了。 ——by 余弦

安全圈很小，安全的海洋很深。安全之路的探险，不如就从 CTF Wiki 开始！

Copyleft

本作品采用知识共享署名-非商业性使用-相同方式共享 4.0 国际许可协议进行许可。