Awesome Reverse Engineering / Practice Targets
Practice Targets
Legal targets, ordered from browser-only exercises to downloaded binaries that need a Windows VM.
| Tool | Use it when | Cost | Last push · Stars |
|---|---|---|---|
| picoGym | CMU's year-round challenges with a gentle reversing category; many run in the browser, some need a download (use the VM). | Free | website |
| Microcorruption | MSP430 lock puzzles in a browser emulator. | Free | website |
| OverTheWire | Bandit, then Leviathan for reversing, over SSH. | Free | website |
| crackmes.one | Large reviewed crackme library with no-malware rules; VM only. ▶ runs | Free | website |
| challenges.re | Short multi-architecture exercises; no public write-ups. | Free | website |
| Root-Me Cracking | About 70 challenges across ELF, PE, .NET, APK, wasm and game engines. ▶ runs | Free · Premium | website |
| Ethernaut | EVM wargame including storage and bytecode levels; testnet-only key. | Free | 2026-10 · ★ 2.3k |
| Damn Vulnerable DeFi | 18 local DeFi challenges on Foundry; run locally. ⚠ No push since 2025-03-21 | Free | 2025-03 · ★ 1.4k |
| Flare-On | Annual Windows reversing contest with official solutions back to 2014; Windows VM. ▶ runs | Free | website |
← Learn