$ cat /var/log/flags/captured
Capture The Flag.
Verified offensive security training on the platforms professionals use. Every technique learned here feeds back into the homelab's defenses.
Verified badges
Independent, dynamically generated badges — pulled directly from HTB and THM servers, updating in real time as Stéphane progresses. Below them, the numbers behind the badges: not a screenshot, but the values the homelab pushes to the site's KV store every ~5 minutes, straight from the platform APIs. No HTB login required to see any of it.
source: /api/stats (KV, pushed every ~5 min by the homelab) · baked into this page at build, 2026-10-25 15:58 UTC
Machine and Fortress flags are counted apart on purpose: a machine holds 2 flags, a Fortress 7 to 11 for a single target — adding them up would mean nothing.
CTF profiles
Active learning on three cybersecurity platforms — the global references for offensive security training. These are not games — they are realistic environments used by professionals, pentesters, and security teams worldwide to sharpen their skills against real-world attack scenarios.
The world's leading offensive security platform. Realistic vulnerable machines — from initial recon to full root. Windows Active Directory, Linux privilege escalation, web exploitation, CVE research. Used by professionals and red teams globally. Stéphane's primary training ground.
Badges & numbers ↑
One of the most popular cybersecurity learning platforms. Guided paths and themed rooms — structured learning from pentesting to SOC operations. Beginner-friendly with progressive difficulty. Used by universities and certification prep worldwide.
View profile →
Europe's leading CTF platform, born in France. Targeted technical challenges — web exploitation, cryptography, forensics, network analysis. Known for its depth and community-driven content. A reference in French-speaking cybersecurity.
View profile →
The feedback loop
Every offensive technique learned directly strengthens a defensive layer on the homelab. This is not a hobby — it is a feedback loop between offense and defense.
Practiced techniques
Skills acquired and validated on real environments — not theory, captured flags.
Active Directory
Web exploitation
Cryptography & cracking
Enumeration & reconnaissance
Privilege escalation
Tools
◆ BREACH — play the AI-security challenge
Shall we play a game? Talk Joshua, the WOPR's AI, out of its launch codes across 4 levels of escalating prompt-injection defenses. A hands-on lesson in attacking — and hardening — LLMs. Live on Cloudflare Workers AI.
◆ Security
See how offense strengthens defense — 6 layers of defense-in-depth deployed across the homelab. SSH hardening, PKI, CrowdSec, Wazuh, Authentik SSO.