Learn
Education is always free
These pages stay free for everyone. They teach defensive habits and the rules of play. They do not teach how to break into a box.
- 01
Phishing and fake login pages
Slow down on unexpected links. Check the sender. Do not send codes to anyone who asks.
- 02
Passwords and multifactor
Use a password manager. Turn on a second factor for email and money.
- 03
Backups you can restore
A backup that was never tested is a story. Practice a restore.
- 04
Updates on internet-facing systems
Unpatched public services are how most boring breaks happen.
- 05
Least privilege
Admin when you need it. Everyday work on a normal account.
- 06
Stay in your arena
In a CTF, scope is the law. The same habit matters at work: only systems you are asked to test.
- 07
Do not share flags or secrets
A flag is proof for one team. A password is not a trophy.
- 08
Report trouble
Know who you tell if something looks wrong — teacher, parent, boss, or the ref.
- 09
Safe use of AI tools
Do not paste private keys, student records, or customer data into a public model.
- 10
When time ends, stop
Official clocks end scoring. Continuing after stop is out of scope.
Schools can bring a whole class.
Middle and high school students play free in the published windows. Educators get the same rules sheet the public sees.