pwnable.tw
Exploit remote binary services and read their flags
pwnable.tw is a wargame for testing your binary exploitation skills. Each challenge is a remote service. You find the bug, write an exploit, and read the flag, which is usually in the home directory, though sometimes you need a full shell first.
Free · SSH · Advanced
About pwnable.tw
It trains serious exploit writing on Linux, and most challenges run on Ubuntu Docker images. Many players consider it harder than other wargames, so it suits people who already know the basics of pwn.
You play through the website and score points per challenge. You can post write-ups on your profile, but only players who solved the same challenge can see them. The rules ask you not to share flags or full solutions to high-score challenges.
On Breakpoint since 23 Oct 2026.