Here you will find pwnables for beginners. Most of the challenges were created for an internal event at our ctf team OpenToAll. Eventually I grew fond of the idea of hosting them publicly, so this website was born. Some challenges will have multiple variations with progressive difficulty, I hope you enjoy them all.

Upon completion of all challenges you will unlock a new feature: permission to upload your own challenges. From the ADD CHALLENGE menu, upload the source, compiler options along with a PoC. All of the uploads will be moderated and only the creative ones will be chosen.
  • Do not share solutions or flags publicly.
  • Do not brute force (too much).
  • If you find a vulnerability that would impact the website/challenges, don't ruin the fun for everybody, report it to us.
  • Most importantly, use common sense and show good sportsmanship.

Challenges Down

Feb. 13, 2019, 6:24 p.m.

All of the challenges are currently down to patch against CVE-2019-5736. Please allow 24 hours from now for the restoration of all the services. Thank you.

Challenge Update

Jan. 13, 2019, 6:24 p.m.

Updated the timeout value for iape from 60 to 180 seconds.


Jan. 1, 2019, 8:05 p.m.

Merry Christmas and Happy New Year!