neboctf Documentation
Everything you need to know to get started with neboctf platform
Getting Started
Creating an Account
To get started with neboctf, you'll need to create a free account. Follow these steps:
- Click on "Sign Up" or "Get Started" from the homepage
- Enter your username, email address, and password
- Select your country from the dropdown
- Accept the terms and conditions
- Verify your email address using the OTP code sent to your inbox
- You're ready to start hacking!
Your First Challenge
Once you've created your account, here's how to tackle your first challenge:
- Navigate to the Challenges page
- Filter challenges by category or difficulty (we recommend starting with "Easy")
- Click on a challenge to view its details
- Read the challenge description and connection details carefully
- Start solving! Use hints if you get stuck
- Submit your flag when you find it
Flag Format
Standard Flag Format
All flags on neboctf follow a consistent format to make validation easier:
Flags are case-sensitive and must include the CTF{} wrapper. The content inside the braces can contain:
- Alphanumeric characters (a-z, A-Z, 0-9)
- Special characters like underscores (_), hyphens (-), and colons (:)
- Spaces are typically not used
Flag Validation
Flags are validated using SHA-256 hashing for security. When you submit a flag:
- The system hashes your submitted flag
- It compares the hash with stored flag hashes
- If matched, you receive points and the challenge is marked as solved
- If incorrect, you'll see an error message
Platform Usage
Leaderboard System
Points are awarded based on challenge difficulty:
| Difficulty | Points | Description |
|---|---|---|
| Easy | 50-150 | Suitable for beginners, introduces basic concepts |
| Medium | 200-350 | Requires intermediate skills and knowledge |
| Hard | 400-600 | Advanced challenges for experienced hackers |
Using Hints
Challenges may include hints to help you when you're stuck:
- Some hints are available immediately
- Additional hints may unlock after multiple incorrect submissions
- Hints are designed to guide you, not give away the solution
- Using hints doesn't reduce your points
Challenge Guide
Challenge Categories
neboctf offers challenges across multiple cybersecurity categories:
- Web Security: SQL injection, XSS, authentication bypasses
- Cryptography: Encryption, hashing, encoding challenges
- Forensics: File analysis, memory dumps, network packets
- Pwn: Binary exploitation, buffer overflows
- OSINT: Open source intelligence gathering
- Reverse Engineering: Binary analysis, code deobfuscation
Challenge Files
Some challenges provide downloadable files or resources:
- Click the "Download Files" button on the challenge page
- Extract and analyze the provided files
- Use appropriate tools for file analysis (hex editors, Wireshark, etc.)
- Look for hidden information, obfuscation, or encoded data
Submission Guidelines
Submitting Flags
When submitting flags, follow these guidelines:
- Copy the flag exactly as found (case-sensitive)
- Include the CTF{} wrapper
- Don't include extra spaces or characters
- Double-check your submission before clicking submit
Rate Limiting
To prevent brute force attempts, flag submissions are rate-limited:
- Maximum 10 submissions per minute per challenge
- Exceeding this limit will temporarily lock submissions
- Lock duration increases with repeated violations
- This encourages careful analysis over guessing
Frequently Asked Questions
General Questions
Q: Is neboctf free to use?
A: Yes! Our free tier provides access to all public challenges, leaderboard participation, and community features.
Q: Do I need prior cybersecurity experience?
A: Not necessarily. We offer beginner-friendly challenges that introduce concepts gradually. However, basic computer skills are recommended.
Q: Can I practice offline?
A: Some challenges provide downloadable files that can be analyzed offline, but you'll need an internet connection to access the platform and submit flags.
Q: How often are new challenges added?
A: New challenges are released regularly. Follow our updates to stay informed about new content.
Q: Can I reset my password?
A: Yes, use the "Forgot Password" link on the sign-in page. You'll receive password reset instructions via email.
Q: Why can't I access the leaderboard?
A: The leaderboard requires authentication. Please log in to view rankings and your position on the leaderboard.