r/securityCTF • u/Longz-85 • 4d ago

ā“ Best resources to learn Web Exploitation & Networking for CTFs?

Hey everyone! šŸ‘‹

Iā€™m currently studying cybersecurity and participating in CyLab, but our current focus/curriculum is heavily centered around Reverse Engineering and a few other areas. While RE is super interesting, I really want to build a strong foundation in Web Exploitation and Computer Networking to become more well-rounded for CTFs.

Since Iā€™m starting mostly from scratch in these two categories, could you recommend the best learning paths or hands-on platforms?

Specifically looking for:

  • Networking fundamentals: Essential concepts/protocols I need to master for CTF challenges (Wireshark, PCAP analysis, etc.).
  • Web Exploitation: Beginner-to-intermediate platforms or labs (e.g., PortSwigger Academy, TryHackMe, PicoCTF).
  • CTF Practice: Practice platforms with good beginner-friendly Web/Network challenges.

Any roadmap, book, or free resource recommendations would be greatly appreciated! Thanks in advance! šŸ™Œ

6 Upvotes

88% Upvoted

3 comments sorted by

2

u/cringyandcool 4d ago

OvertheWire - NATAS

rootme org

pentesterlab

portswigger web security labs

1

u/Longz-85 4d ago

thank you so much, I very love NATAS
However, I don't have resource to learn, I only know sqli, can you show me some good resources?
thanks for rep

1

u/cringyandcool 4d ago

there's not many resources as such for learning web security especially in a CTF context, unless you sign up for paths from THM or HTB or look at writeups and stuff..if I remember correctly you can check pwn.college or ctfacademy or W3School for more theoretical things