Go from zero to your first flags on NepSec CTF, with the rules, tools and methods real players use
Put this course to work on real challenges and in-browser labs. Each CTF category is a trek through the Himalaya, climbed one stop at a time. Free to play.
Capture the Flag (CTF) competitions are the fastest way to turn security theory into real skill. Each challenge hides a secret string, the flag, behind a puzzle: a vulnerable web page, a scrambled message, a suspicious file, a locked-down Linux box. Find the flag, submit it, score points.
This free starter course takes you from "what is a CTF?" to solving your first challenges on NepSec CTF. You will learn how competitions work and the rules that keep them legal, set up a small toolkit, learn to read a challenge description like a hacker, recognise the encodings that appear in almost every beginner challenge, and build a repeatable method for when you get stuck.
Every lesson is short and practical. By the end you will have solved real challenges and written your first write-up, the habit that separates people who play CTFs from people who learn from them.
3 sections, 9 lessons, 11m total
Incident response engineer in Kathmandu and builder of NepSec
I'm an incident response engineer at Stellar Computer Systems (SCS) in Kathmandu, where I lead incident response, analyse threats and advise clients on their security posture. My work spans security operations, threat detection, threat intelligence, security engineering and vulnerability assessment. I'm listed in Apple's Security Hall of Fame for responsibly disclosing vulnerabilities in Apple's infrastructure, and I hold certifications from Microsoft, Fortinet, Cisco, Google, CrowdStrike and The SecOps Group. When the tools I need don't exist, I build them. That's how NepSec Intel, NepSec Academy and NepSec CTF came to be. My courses teach the same practical skills I use at work, and NepSec CTF is where you put them to the test.
5 published courses
No reviews yet. Enrolled students can leave the first one.
Yes. It is the free entry point to NepSec Academy and NepSec CTF.
Not to start. A browser is enough for the first challenges. The toolkit lesson shows what to add later.
Practising on systems built for it, like CTF challenges, is legal. Attacking systems without permission is not. Lesson two covers exactly where the line is.
Yes. Complete every lesson, pass the quiz and submit the assignment to earn a certificate of completion.