The development of cybersecurity.wtf was started in May 2018:

• To fill a gap in lacking timeless practice platform to emulate simple, yet mind-blowing bug bounty findings.
• To fill a gap in lacking timeless practice platform to train our security thought process with real-world incidents from news media.
• To build a no-nonsense, time-saving, one-page knowledge sharing portal with quick in-page search capability, infused with small, digestible, actionable, curated, gist on cybersecurity ("KATANA Knowledgebase").
• To build a penny plain, time-saving, one-page information news portal infused with cyber attack maps and aggregated trust-worthy news sources to keep you posted of what's happening in cybersecurity industry ("RADAR").
• Last but not least, to make you aware of the importance of life and career aspects through KATANA to avoid ever sinking in all-time-information-overloaded cybersecurity world.

Challenges are crafted, based on bounty write-ups, real-world case studies, and incident news, not based on brain-burning CTFs.

As of today, I have crafted 209 exercises to challenge your skillsets and thought process. Outdated challenges are removed from the platform in line with the current trend.

Curated gists from various sources: tweets, blogs, papers, conferences, books, tubes, great people I've come across..etc.

Gists on life and career aspects are also featured as they are mostly under-rated among technical professionals. Gists are updated if useful non-repeated information is learnt. Outdated gists are removed from the platform in line with the current trend.

Challenges are aimed for a wider audience - The web war is for penetration testers, cybersecurity drills for app sec/business IT professionals.

This platform was created to share my learning and and assessment experience with you, for which I am proud of as a veteran professional. The techniques you learn can be put into practice right away.

Majority of challenges do not rely on particular technology stacks.

Challenges are developed in technology neutral way mainly to reflect human mistakes, insecure design, poor implementation practices and common weakness patterns propagated across majority of technologies.

Web has been everywhere from mobile app, digital signage to iOT. It has been growing and more and more feature-rich than before including recent HTTP2, WebSocket, WebAssembly.

In this challenge series, all challenges are based on real-world incidents and researches.

Majority of world most infamous incidents are stemmed from the root cause of insecure designs, business limitations, human ignorance, and failure to foresee the risks.

In this challenge domain, you will be bombarded with questions on features broken by hackers up to date.