CTFs are divided into 5 standard categories: Web, Crypto, Forensics, Rev (Reverse Engineering), and Pwn (Binary Exploitation). Start with PicoCTF: solve the 50-point web challenges (inspecting page source, modifying cookies, basic SQL injections), then learn Ghidra for reverse engineering simple binaries. The dopamine of finding your first flag is unmatched.