Overview

Nebo CTF helps players learn offensive and defensive security by solving challenges across categories like web, crypto, forensics, pwn, and OSINT. Points contribute to individual and team rankings.

Core features

• Challenge library with difficulty ratings and categories
• Team collaboration and team leaderboards
• Timed competitions and events
• Learning paths and labs
• Progress tracking and notifications

Profile fields

From Profile in the app menu, you can update:

• Display name and bio
• Profile avatar
• Country (set at registration)
• Public activity and solve history

Ways to participate

• Join or create a team
• Register for competitions
• Climb the leaderboard
• Follow the Code of Conduct

Categories

Difficulty levels

Easy, Medium, Hard, and Very Hard — each maps to a point range on the challenge card.

Recommended workflow

1. Browse — Open the challenge list and filter by category or difficulty.
2. Read — Review the description, connection details, and attachments.
3. Enumerate — Gather information before attempting exploitation.
4. Solve — Work toward the flag; use hints if stuck.
5. Submit — Submit via the flag form on the challenge page.

Flag format

Flags use the standard wrapper (case-sensitive):

CTF{flag_content_here}

Validation

Submitted flags are hashed and compared securely. On a correct first submission you receive points and the challenge is marked solved.

Examples

Using hints

• Some hints are available immediately on the challenge page
• Additional hints may unlock after incorrect attempts
• Hints do not reduce your points
• Use hints to learn — not as a substitute for understanding

Point ranges

Steps

1. Go to Teams and click create
2. Choose a team name and slug
3. Invite members or approve join requests
4. Compete together on team rankings

Join process

Browse teams from the Teams page, send a join request, and wait for captain approval. You'll receive a notification when approved or rejected.

Roles

• Captain — Approve/reject requests, manage roster, delete team
• Member — Submit flags; solves count toward team score

Register your team for eligible events. Team scores aggregate member solves during the event window. See Participating for event details.

How it works

1. Browse Events
2. Review format, schedule, and rules
3. Register before the deadline
4. Solve challenges during the active window
5. Track standings on the event leaderboard

Open an event detail page and click Register. Some events cap participants or require verified accounts. Duplicate registrations are blocked.

• No sharing flags or solutions during active events
• No attacks against platform infrastructure
• Respect rate limits on submissions
• Follow organizer announcements

Global rankings live on the Leaderboard. Event rankings appear on each event page. Only users who have solved at least one challenge appear on the global board.

Browse paths from Learning. Each path contains modules, topics, notes, and linked challenges or labs.

Complete lab content, submit answers or files as instructed, and track review status from your lab submissions page.

Your dashboard shows recent activity, solve streak, and recommended next steps. Learning path progress is tracked per module and topic.

Access Profile from the app menu to edit your bio, avatar, and view your solve history and statistics.

Update display preferences, country, and other account fields from Settings. Some fields require re-authentication for security.

Configure notification preferences from Notification Settings. In-app notifications appear in the header bell icon when logged in.

• Use a unique, strong password
• Keep your email verified and accessible
• Sign out on shared devices
• Report suspicious activity via Reporting Abuse

Reset your password anytime via Forgot Password.

• Be respectful in teams and public channels
• No harassment, hate speech, or discrimination
• Give constructive feedback in discussions
• Follow organizer and moderator directions

• Solve challenges yourself or with your registered team
• Do not share flags during active competitions
• Respect submission rate limits
• Do not attempt to disrupt the platform

Check individual event pages for eligibility requirements. Organizers may disqualify participants who violate rules.

Contact us via Support with details and evidence. We review reports confidentially.

Common fixes

• Verify email before signing in if required
• Use email or username in the identifier field
• Reset password via Forgot Password
• Clear cookies or try a private window
• Check caps lock for passwords

Checklist

• Confirm CTF{} wrapper and exact casing
• Remove trailing spaces
• Wait if rate-limited (max ~10/min per challenge)
• Ensure you're logged in
• Refresh the challenge page and retry

• Pending requests — captain must approve from team page or notifications
• Can't join — team may be full or request already pending
• Leave team — use team settings; captains must transfer role first

General

Is Nebo CTF free?

Yes — the free tier includes public challenges, leaderboard, teams, and community features.

Do I need experience?

No. Start with Easy challenges and learning paths.

Can I practice offline?

Some challenges offer downloadable files; submissions require internet access.

Why can't I see the leaderboard?

Sign in to view rankings. Only players with at least one solve are ranked.

How do I reset my password?

Use Forgot Password on the login page.