How to use the CTF Practice for Beginners
- 1. Pick a challengeStart with the 10-point ones; each says what you're looking at.
- 2. Decode with the workbenchBase64, hex, binary, URL, ROT13, Caesar, XOR, Morse, JWT and MD5 tools are built in.
- 3. Submit the flagFlags look like UC{...}; your score and solved challenges are saved in this browser.
What CTFs teach
Capture the flag contests are how many security professionals got started. Each challenge hides a flag that you recover by understanding how something works. These 12 cover the basics every beginner meets: encodings (Base64, hex, binary, URL encoding) that look secret but aren't; classic ciphers (ROT13, Caesar, Morse); web lessons (reading a JWT's payload, finding comments in page source); forensics (identifying a file from its first bytes); and cryptography (cracking an unsalted MD5 with a wordlist, and breaking single-byte XOR). After each solve, a short explanation says what the challenge teaches. Use these skills only in labs like this one, or on systems you own or have written permission to test; attacking real websites is a crime under India's IT Act.
The page stores only the SHA-256 hash of each flag, so the answers can't be read from its source, and we checked that every challenge can be solved with the built-in workbench alone.
Worked example
Challenge 1 shows VUN7YmFzZTY0X2lzX25vdF9lbmNyeXB0aW9ufQ==. The == at the end hints at Base64; choose Base64 decode in the workbench and it reads UC{base64_is_not_encryption}. Submit it for 10 points. All 12 challenges add up to 210 points; the last two, MD5 cracking and XOR, are worth 30 each.
Where to go next
- Try beginner-friendly platforms such as picoCTF or OverTheWire's Bandit.
- Learn Linux commands and Python scripting; most challenges need both.
- Write up how you solved each challenge; write-ups are great for your portfolio.
Frequently asked questions
Do I need coding skills?
Not for these. The workbench does the decoding; the skill is recognising what you're looking at.
Can I reset my progress?
Clear this site's data in your browser settings, or use a private window.
Is the CTF practice free?
Yes. You can open the CTF practice and try everything without signing up. When you submit a flag for the first time, we ask once for your name and WhatsApp number; after that it, and every other Uncodemy tool, opens straight away.