@HackForgeCTF

HackForge is a free, community-driven CTF platform focused on forging real-world defensive and offensive cybersecurity skills.

hackforge.com
Joined November 2017
  • Tweets21
  • Following204
  • Followers220
Check it out on hackforge.com

HackForge - Free Hands-On CTF Challenges

Practice real-world cybersecurity skills with hands-on CTF challenges in web exploitation, binary pwn, cryptography, forensics, and reverse engineering.

hackforge.com
Tristan@TristanInSecAug 20
10 new challenges just dropped on @HackForgeCTF 🔥
23
HackForge retweeted
Tristan@TristanInSecAug 20
10 new challenges just dropped on @HackForgeCTF 🔥
2
1
2
80
🔥 New Drop on HackForge.com 🔥 ~ 3 new web challenges are live! ~ New AI Guideline #cybersecurity #ctf #appsec #infosec #ethicalhacking #ai #hackforge

HackForge - Free Hands-On CTF Challenges

Practice real-world cybersecurity skills with hands-on CTF challenges in web exploitation, binary pwn, cryptography, forensics, and reverse engineering.

hackforge.com
1
134
Platform Update: ~ Web Challenges: 5 labs dropped ~ Pwn: 1 challenge updated and 2 new ones ~ XP Rebalance & Hint Improvements, UI Polish ~ CTF Thursdays: Starting next week, every Thursday at least one new challenge drops! Happy Hacking! #ctf #ctfs #ethicalhacking #cybersecurity
1
108
HackForge retweeted
Tristan@TristanInSecJan 23
🔥 New Drop on HackForge.com 🔥 Check this out. I prepared a complete ClickFix attack 😈 Not for malicious intent, but to offer you a cool CTF challenge! #cybersecurity #socialengineering #clickfix #dfir #forensics #ctf #infosec #blueteam #hackforge
2
301
Reversing public #security advisories has been a lot of fun lately. Here's an exploit I've built for CVE-2025-9501 that potentially affects 1+ million #WordPress installations: rcesecurity.com/2025/11/expl…

Exploiting A Pre-Auth RCE in W3 Total Cache … | RCE Security

We recently came across a very brief vulnerability announcement made by WPScan about CVE-2025-9501, which is described as an "Unauthenticated Command Injection" …

rcesecurity.com
19
117
13,087
Wrote an in depth review of the new SANS SEC565 Red Team Operations and Adversary Emulation. Purpose: Help those figure out if it's for them.. linkedin.com/pulse/sans-sec5… PS: If you decide it's your poison, then @Jean_Maes_1994; @jorgeorchilles & Barrett are running it this month

SANS SEC565 Review for 2023. Is this the ultimate Red Team Course?

What!!..

linkedin.com
14
55
6,484
consistency > perfection hard work > knowledge discipline > motivation happiness > money what else?
20
11
114
18,636
I recently finished up exploits for what I believe to be CVE-2023-20025 and CVE-2023-20026. It's kind of wild that Cisco isn't going to patch these with ~20k internet-facing / affected devices.
3
6
1
58
16,280
HackForge retweeted
H4x0r.DZ
@h4x0r_dz2 Feb 2023
CVE-2022-44268 ImageMagick Arbitrary File Read metabaseq.com/imagemagick-ze…
6
63
2
323
46,365
If inflation is 10%, is a 9% pay rise considered a pay rise? 😅
11
6
1
16
9,564
HackForge retweeted
chompie
@chompie133720 Dec 2021
tgidg (thank god i downloaded ghidra)
This quoted post is unavailable.
Try viewing anyway · View on X
6
6
1
248
HackForge retweeted
Florian A.@ExeqZ20 Dec 2021
Replying to @chompie1337
@chompie1337
1
2
18
RE tip of the day: In OOXML files, if macros are supported, the last letter of the file extension will be m rather than x (example: .xlsm). If you see inside files with an extension .bin instead of .xml, the sample file extension should end with b (like .xlsb) #infosec #reversing
6
37
HackForge retweeted
Psycopg@psycopg13 Dec 2021
A lot of people blaming #Log4j devs about the exploit... I honestly find it pathetic. A lot of people sharing the "Dependency" XKCD post? Maybe appropriate. But this is WAY more appropriate. You get what you pay for, and if you can, and don't pay enough, YOU are to blame.
6
73
2
301
Load more