InnoCTF status: online

visitor@innoctf:~$ cat mission.txt

Independent security learning resource

Read the writeups. Break the lab. Keep the notes.

InnoCTF publishes practitioner-grade capture-the-flag writeups and structured training across web, binary exploitation, cryptography, forensics, and reversing. Reproducible methods, cited sources, no hand-waving.

//

Latest writeups

$ ls -t writeups/ | head -4
Abstract art of the security perimeter being turned into an attack payload
webThreat analysis

When the perimeter becomes the payload

AutoJack, FortiBleed, and SocGholish read together: the layer you trust to protect a system is now the way in.

confused-deputy22 Jun 2026
##

Tracks

5 silos · pick a path

web

Injection, auth flaws, deserialization, SSRF, and the modern agent trust model.

62 writeups

pwn

Memory corruption, heap grooming, ROP, and modern mitigation bypasses.

48 writeups

crypto

Padding oracles, lattice attacks, side channels, and protocol misuse.

37 writeups

forensics

Disk and memory analysis, packet carving, log timelines, and artifact recovery.

29 writeups

reversing

Static and dynamic analysis, anti-debug, VM obfuscation, and firmware unpacking.

41 writeups
>

Run the lab locally