3b1b82b9a0
2.1.4 / 2019-08-30 ================== **General** * Make user pages show the team's score and place information instead of the user's information if in team mode * Allow admins to search users by IP address * Require password for email address changes in the user profile * The place indicator in `Teams Mode` on the team pages and user pages now correctly excludes hidden teams * Fix scoreboard place ordinalization in Python 3 * Fix for a crash where imports will fail on SQLite due to lack of ALTER command support * Fix for an issue where files downloaded via S3 would have the folder name in the filename * Make `Users.get_place()` and `Teams.get_place()` for return None instead of 0 if the account has no rank/place * Properly redirect users or 403 if the endpoint requires a team but the user isn't in one * Show affiliation in user and team pages in the admin panel and public and private user and team pages **Themes** * Remove invalid `id='submit'` on submit buttons in various theme files * Set `tabindex` to 0 since we don't really care for forcing tab order * Rename `statistics.js` to `graphs.js` in the Admin Panel as it was identified that adblockers can sometimes block the file **API** * The team profile endpoint (`/api/v1/teams/me`) will now return 403 instead of 400 if the requesting user is not the captain * The Challenge API will now properly freeze the solve count to freeze time |
||
|---|---|---|
| .github | ||
| CTFd | ||
| docs | ||
| migrations | ||
| scripts | ||
| tests | ||
| .codecov.yml | ||
| .dockerignore | ||
| .flaskenv | ||
| .gitignore | ||
| .prettierignore | ||
| .travis.yml | ||
| CHANGELOG.md | ||
| CONTRIBUTING.md | ||
| Dockerfile | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| Vagrantfile | ||
| development.txt | ||
| docker-compose.yml | ||
| docker-entrypoint.sh | ||
| export.py | ||
| import.py | ||
| manage.py | ||
| package.json | ||
| populate.py | ||
| prepare.sh | ||
| requirements.txt | ||
| serve.py | ||
| setup.cfg | ||
| wsgi.py | ||
| yarn.lock | ||
README.md
What is CTFd?
CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes.
Features
- Create your own challenges, categories, hints, and flags from the Admin Interface
- Dynamic Scoring Challenges
- Unlockable challenge support
- Challenge plugin architecture to create your own custom challenges
- Static & Regex based flags
- Custom flag plugins
- Unlockable hints
- File uploads to the server or an Amazon S3-compatible backend
- Limit challenge attempts & hide challenges
- Automatic bruteforce protection
- Individual and Team based competitions
- Have users play on their own or form teams to play together
- Scoreboard with automatic tie resolution
- Hide Scores from the public
- Freeze Scores at a specific time
- Scoregraphs comparing the top 10 teams and team progress graphs
- Markdown content management system
- SMTP + Mailgun email support
- Email confirmation support
- Forgot password support
- Automatic competition starting and ending
- Team management, hiding, and banning
- Customize everything using the plugin and theme interfaces
- Importing and Exporting of CTF data for archival
- And a lot more...
Install
- Install dependencies:
pip install -r requirements.txt- You can also use the
prepare.shscript to install system dependencies using apt.
- You can also use the
- Modify CTFd/config.py to your liking.
- Use
flask runin a terminal to drop into debug mode.
You can use the auto-generated Docker images with the following command:
docker run -p 8000:8000 -it ctfd/ctfd
Or you can use Docker Compose with the following command from the source repository:
docker-compose up
Check out the wiki for deployment options and the Getting Started guide
Live Demo
Support
To get basic support, you can join the CTFd Slack Community:
If you prefer commercial support or have a special project, feel free to contact us.
Managed Hosting
Looking to use CTFd but don't want to deal with managing infrastructure? Check out the CTFd website for managed CTFd deployments.
MajorLeagueCyber
CTFd is heavily integrated with MajorLeagueCyber. MajorLeagueCyber (MLC) is a CTF stats tracker that provides event scheduling, team tracking, and single sign on for events.
By registering your CTF event with MajorLeagueCyber users can automatically login, track their individual and team scores, submit writeups, and get notifications of important events.
To integrate with MajorLeagueCyber, simply register an account, create an event, and install the client ID and client secret in the relevant portion in CTFd/config.py or in the admin panel:
OAUTH_CLIENT_ID = None
OAUTH_CLIENT_SECRET = None
Credits
- Logo by Laura Barbera
- Theme by Christopher Thompson
- Notification Sound by Terrence Martin