I'm a semi-active member of the Dragon Sector CTF team [1]. We're a competitive security CTF team that's #1 on the ctftime.org ranking for 2018. CTFs are as ac

I'm a semi-active member of the Dragon Sector CTF team [1]. We're a competitive security CTF team that's #1 on the ctftime.org ranking for 2018. CTFs are as active as ever, but a lot of the high-stake ones (at least per ctftime.org) are very much focused on hard core exploitation challenges, and more and more actually include 0days and real-life challenges like browser expolitation (for instance, the 35C3 CTF had a VirtualBox 0day (GL acceleration bug), a logrotate 0day (race condition) and a patched Webkit and Chromium to exploit. Honestly, the rising exploitation difficulty is what's slowly driving me away from traditional binary challenges - and so, I'm mostly focusing on either obscure architectures, hardware or other weird challenges. There's more and more 'IoT' challenges as well - like exploiting vulnerable ESP8266 or ARM microcontroller code. I've created a somewhat 'IoT' challenge [2] for WCTF 2018, where you have to exploit a hardware flaw in a remote RISC-V device. A lot of CTF people are on IRC - try #pwning on Freenode (PPP's channel), or #dragonsector :). If you have a local hackerspace, they might have a CTF team you can join. [1] - https://dragonsector.pl/ https://dragonsector.pl/ [2] - https://hardflag.q3k.org/ https://hardflag.q3k.org/