“Handbook for CTFers: Zero to One” was written by the Nu1L team, one of China’s top CTF teams. As for Jeopardy-style CTFs, the content in the first 10 chapters of this book not only covers traditional categories of tasks like WEB, PWN and Crypto, but also includes some of the latest hot topics and techniques, such as blockchain. Case studies are provided for all of these types.Onsite Attack-Defend-style CTFs and penetration testing are introduced in Chapter 11 and Chapter 12.

In order to help readers gain the most from the book, we have developed the N1Book platform, which addresses practical questions for different task categories.

The book offers beginners a reliable, systematic tutorial on CTF competition. At the same time, it includes real case studies and a wealth of our competition experience, making it a valuable asset for experienced CTF players.

Table of Contents

1 Introduction to the Web

2 Advanced Web

3 Advanced Web Challenges

4 APK

5 Reverse Engineering

6 PWN

7 Crypto

8 Smart Contracts

9 Misc

10 Code Auditing

11 AWD

12 Virtual Target Penetration Test

About the Author

Nu1L Team, a top CTF team in China, was founded in 2015. The team members hail from various universities and organizations throughout China, and are all cybersecurity enthusiasts interested in diverse fields like web security, binary analysis, IoT security, cryptography, etc.The Nu1L team was the winner at DEFCONCHINA BCTF2018、XCTF 2019 Finals, ranked 7th globally in the DEFCON CTF2021 Finals. Most recently, the team won GEEKPWNCTF2020. Nu1L has also organized multiple CTF games such as N1CTF, NPointer and geekpeak.