Security games
Breakpoint lists 39 games to learn hacking, link-checked every 12 hours. Updated 25 Oct 2026.
From quick browser puzzles to longer challenges, free and paid. A person played each one before it was listed.
ctf/ · 36 of 39
- Hack Solidity smart contracts on a test networkHack Solidity smart contracts on a test network
- Inject scripts into vulnerable web apps, level by levelInject scripts into vulnerable web apps, level by level
- Call alert(1) through unsafe code with the shortest input you can findCall alert(1) through unsafe code with the shortest input you can find
- Find and exploit the bugs in a small, cheesy web appFind and exploit the bugs in a small, cheesy web app
- Learn each web flaw, then exploit it in a hands-on labLearn each web flaw, then exploit it in a hands-on lab
- Find flags in web, crypto, pwn, reversing and forensics challengesFind flags in web, crypto, pwn, reversing and forensics challenges
- Solve hundreds of CTF challenges across many categoriesSolve hundreds of CTF challenges across many categories
- Start your own challenge instance and capture the flag anytimeStart your own challenge instance and capture the flag anytime
- Link your challenge site accounts and see one global rankingLink your challenge site accounts and see one global ranking
- Solve old-school hacking missions, from basic web flaws to coding tasksSolve old-school hacking missions, from basic web flaws to coding tasks
- Read compiled code and work out what each function doesRead compiled code and work out what each function does
- Debug and exploit an emulated MSP430 door lock in your browserDebug and exploit an emulated MSP430 door lock in your browser
- Write code that breaks real crypto, one set of challenges at a timeWrite code that breaks real crypto, one set of challenges at a time
- Break real cryptography with code and climb the scoreboardBreak real cryptography with code and climb the scoreboard
- Solve hacking challenges across web, crypto, forensics and moreSolve hacking challenges across web, crypto, forensics and more
- Solve hands-on hacking challenges and earn beltsSolve hands-on hacking challenges and earn belts
- Carnegie Mellon's free security challenges for learnersCarnegie Mellon's free security challenges for learners
- CyberDefendersFreemiumBlue team labs where you investigate incidents from real evidenceBlue team labs where you investigate incidents from real evidence
- Blue Team Labs OnlineFreemiumAnswer questions about simulated incidents to practise defenceAnswer questions about simulated incidents to practise defence
- PentesterLabFreemiumHands-on labs for web security and secure code reviewHands-on labs for web security and secure code review
- TryHackMeFreemiumWork through guided security rooms with a hacking machine in your browserWork through guided security rooms with a hacking machine in your browser
- Hack The BoxFreemiumHack into live lab machines and capture the flagsHack into live lab machines and capture the flags
- Free library of vulnerable virtual machines for home lab practiceFree library of vulnerable virtual machines for home lab practice
- Run a deliberately broken web shop and hack itRun a deliberately broken web shop and hack it
- Crack programs for Windows, Linux, .NET, Java and moreCrack programs for Windows, Linux, .NET, Java and more
- Download community crackmes and reverse engineer themDownload community crackmes and reverse engineer them
- Chain ROP gadgets to exploit eight small binariesChain ROP gadgets to exploit eight small binaries
- Solve beginner pwn challenges and earn the right to add your ownSolve beginner pwn challenges and earn the right to add your own
- Exploit remote binary services and read their flagsExploit remote binary services and read their flags
- SSH into a server and exploit programs to read the flagSSH into a server and exploit programs to read the flag
- Download vulnerable VMs and exploit Linux programs level by levelDownload vulnerable VMs and exploit Linux programs level by level
- Free security wargames played over SSH in a real shellFree security wargames played over SSH in a real shell
