I'm a cybersecurity researcher and have spent the past few years at university participating in capture-the-flag competitions. I've become comfortable observing deliberately vulnerable challenges, testing them, and writing proof-of-concept exploits to retrieve flags. However, I don't feel that this has improved my general programming ability very much. I have a basic foundation, but I haven't yet built a complete system such as a website, application, or useful tool. I'm also unsure how to choose a worthwhile project that will help me learn. What would be a practical way to develop my coding skills beyond CTF work?
1 Answer
The most effective way to improve is to build things, even if they start out small or seem a little silly. Choose a project connected to something you already care about, such as a command-line tool that parses CTF notes, a vulnerability-tracking app, a personal knowledge base, or a simple web dashboard. Start with a tiny version, then add features as you discover what you don’t know. Building will force you to practice structure, debugging, testing, documentation, and maintenance—not just exploit development.
I understand the approach, but I’m still having trouble coming up with a project idea that is manageable and useful.