HackForge

HackForge is a free, community-driven CTF platform focused on forging real-world defensive and offensive cybersecurity skills.

[HackForge @HackForgeCTF]

Check it out on https://t.co/9MdECmmI13

[Tristan @TristanInSec]

10 new challenges just dropped on @HackForgeCTF 🔥

[HackForge @HackForgeCTF]

@theXSSrat Cool! I also considered releasing my backend, like this. Maybe I'll open-source it later.

[Tristan @TristanInSec]

10 new challenges just dropped on @HackForgeCTF 🔥

[HackForge @HackForgeCTF]

🔥 New Drop on https://t.co/1Vi0IhwLIC 🔥
~ 3 new web challenges are live!
~ New AI Guideline
#cybersecurity #ctf #appsec #infosec #ethicalhacking #ai #hackforge

[HackForge @HackForgeCTF]

@ykrauq Interesting perspective (as a challenge author!). I agree with you, AI makes CTFs much more accessible, but it definitely has both pros and cons 🙂

[HackForge @HackForgeCTF]

@Steph3nSims Totally agree!

[HackForge @HackForgeCTF]

@barvaosa @LeftenantZero @CryptoHack__ Hey! Feel free to try our challenges, in addition to the ones in this post.

[HackForge @HackForgeCTF]

@LeftenantZero Very nice! I'm also working on some pwn challenges here.

[HackForge @HackForgeCTF]

Platform Update:
~ Web Challenges: 5 labs dropped
~ Pwn: 1 challenge updated and 2 new ones
~ XP Rebalance & Hint Improvements, UI Polish
~ CTF Thursdays: Starting next week, every Thursday at least one new challenge drops!
Happy Hacking!
#ctf #ctfs #ethicalhacking #cybersecurity

[Tristan @TristanInSec]

🔥 New Drop on https://t.co/Os2OBv5jUa 🔥

Check this out. I prepared a complete ClickFix attack 😈

Not for malicious intent, but to offer you a cool CTF challenge!

#cybersecurity #socialengineering #clickfix #dfir #forensics #ctf #infosec #blueteam #hackforge

[Julien | MrTuxracer 🇪🇺 @MrTuxracer]

Reversing public #security advisories has been a lot of fun lately. Here's an exploit I've built for CVE-2025-9501 that potentially affects 1+ million #WordPress installations:

https://t.co/PVBnKi0rO8

[RedTeamRaw @redteamraw]

Wrote an in depth review of the new SANS SEC565 Red Team Operations and Adversary Emulation.

Purpose: Help those figure out if it's for them.. https://t.co/RfgBLHNX3z

PS: If you decide it's your poison, then @Jean_Maes_1994; @jorgeorchilles & Barrett are running it this month

[Luke Stephens (hakluke) @hakluke]

consistency > perfection
hard work > knowledge
discipline > motivation
happiness > money

what else?

[Jacob Baines @Junior_Baines]

I recently finished up exploits for what I believe to be CVE-2023-20025 and CVE-2023-20026. It's kind of wild that Cisco isn't going to patch these with ~20k internet-facing / affected devices.

[H4x0r.DZ @h4x0r_dz]

CVE-2022-44268 ImageMagick Arbitrary File Read
https://t.co/oZv2RCNfoh

[Vincent Yiu @vysecurity]

If inflation is 10%, is a 9% pay rise considered a pay rise? 😅

[chompie @chompie1337]

tgidg (thank god i downloaded ghidra)

[Florian A. @ExeqZ]

@chompie1337

[Reverse Engineering and More @re_and_more]

RE tip of the day: In OOXML files, if macros are supported, the last letter of the file extension will be m rather than x (example: .xlsm). If you see inside files with an extension .bin instead of .xml, the sample file extension should end with b (like .xlsb)
#infosec #reversing

[Psycopg @psycopg]

A lot of people blaming #Log4j devs about the exploit... I honestly find it pathetic. A lot of people sharing the "Dependency" XKCD post? Maybe appropriate. But this is WAY more appropriate.

You get what you pay for, and if you can, and don't pay enough, YOU are to blame.