trailofbits/ctf
FreeCTF Field Guide
FreeFree tier
About trailofbits/ctf
CTF Field Guide is a free, open-source book by Trail of Bits that teaches readers how to win Capture The Flag (CTF) competitions. It covers four key disciplines of professional computer security: vulnerability discovery, exploit creation, toolkit creation, and operational tradecraft. The guide includes walkthroughs of past CTF challenges, guidance for designing custom toolkits, case studies of attacker behavior (both real-world and CTF), and curated reference materials from leading security experts. It is structured for self-paced learning and encourages community collaboration to keep the content evolving with the industry.
Key Features
Walkthroughs and details of past CTF challenges
Guidance to design and create your own toolkits
Case studies of attacker behavior from real world and CTF competitions
Curated supplementary reference materials from top security experts
Community-driven updates and collaboration
Covers vulnerability discovery, exploit creation, toolkit creation, and operational tradecraft
Pros & Cons
Pros
- Comprehensive coverage of all major CTF disciplines
- Free and open source under CC-BY-SA-4.0 license
- Authored by experienced security professionals from Trail of Bits
- Includes curated external references for deeper learning
- Structured for self-paced learning and intended to evolve with community contributions
Best For
Learning how to win Capture The Flag competitionsPreparing for a career in computer security by thinking like an attackerStudying vulnerability discovery and exploit developmentDesigning custom security toolkitsUnderstanding operational tradecraft used in offensive and defensive security
FAQ
What is the CTF Field Guide?
It is a free, open-source book by Trail of Bits that teaches the skills needed to succeed in Capture The Flag competitions, covering vulnerability discovery, exploit creation, toolkit creation, and operational tradecraft.
Who is the CTF Field Guide for?
It is designed for anyone interested in learning offensive security techniques, whether to win CTF competitions or to build a career in computer security defense by thinking like an attacker.
Is the CTF Field Guide free?
Yes, it is free and open source, hosted on GitHub under a CC-BY-SA-4.0 license.
What topics does the guide cover?
The guide covers vulnerability discovery, exploit creation, toolkit creation, and operational tradecraft, with walkthroughs of past CTF challenges, guidance for building toolkits, case studies, and curated reference materials.