🚩 CyberCTF Platform

A comprehensive Capture The Flag (CTF) platform for cybersecurity education and training

🚀 Live Demo • 🐛 Report Bug • 💡 Request Feature

📋 Table of Contents

Overview
Features
Demo
Technology Stack
Installation
Usage
Challenge Categories
API Documentation
Deployment
Contributing
Security
License
Contact

🎯 Overview

CyberCTF Platform is a professional-grade Capture The Flag (CTF) platform designed for cybersecurity education and training. Built with Flask and featuring real-time challenges across multiple security domains, it provides an engaging way to learn cybersecurity concepts through hands-on practice.

Perfect for:

🎓 Educational institutions teaching cybersecurity
🏢 Corporate training programs
👨‍💻 Individual learners wanting to practice security skills
🏆 CTF competitions and events

✨ Features

🏆 Competition Features

20+ Educational Challenges - Web Security, Cryptography, Network Security, Password Cracking, Reverse Engineering
Progressive Difficulty System - From Beginner to Medium complexity
Real-Time Scoring System - Live point tracking and leaderboard updates
Comprehensive Explanations - Learn the "why" behind each solution
Enhanced Hint System - Guided learning with educational hints
Category Progress Tracking - Visual progress bars for each domain

👥 User Management

Secure Authentication - Password hashing with Werkzeug
User Profiles - Track progress and achievements
Session Management - Secure user sessions
Registration System - Easy account creation

📊 Analytics & Tracking

Live Leaderboard - Real-time competition rankings
Progress Tracking - Monitor solved challenges and scores
Submission History - Track all flag submission attempts
Performance Statistics - Detailed user analytics

🎨 User Experience

Modern Hacker-Themed UI - Immersive cybersecurity aesthetic
Mobile Responsive - Works on all devices
Real-Time Feedback - Instant success/error notifications
Intuitive Navigation - Easy-to-use interface

🎮 Demo

🌐 Live Demo

Try the platform: https://cyberctf-platform.onrender.com

🧪 Test Credentials

Registration: Create your own account
Sample Challenges Available: 7 challenges across 5 categories

📸 Screenshots

Home Page	Dashboard	Challenges

🛠️ Technology Stack

Backend

Flask 2.3.3 - Python web framework
SQLite - Lightweight database
Werkzeug - Password hashing and security
Python 3.8+ - Programming language

Frontend

HTML5 & CSS3 - Modern web standards
JavaScript (Vanilla) - Interactive functionality
Font Awesome - Icon library
Responsive Design - Mobile-friendly layout

Deployment

Render.com - Cloud hosting platform
Gunicorn - Python WSGI HTTP Server
Git - Version control

🚀 Installation

Prerequisites

Python 3.8 or higher
Git
Web browser

Local Development Setup

Clone the repository

git clone https://github.com/TheGhostPacket/cyberctf-platform.git
cd cyberctf-platform

Create virtual environment

python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

Install dependencies

pip install -r requirements.txt

Run the application

python app.py

Open in browser

http://localhost:5000

Docker Setup (Optional)

# Build image
docker build -t cyberctf-platform .

# Run container
docker run -p 5000:5000 cyberctf-platform

📖 Usage

Getting Started

Register an Account
- Visit the registration page
- Create username, email, and password
- Login to access challenges
Choose Challenge Category
- Navigate to Dashboard
- Select from available categories
- View difficulty and point values
Solve Challenges
- Read challenge descriptions
- Find hidden flags
- Submit in format: FLAG{solution}
- Use hints if needed
Track Progress
- View your score on dashboard
- Check leaderboard rankings
- Monitor solved challenges

Challenge Format

All flags follow the format: FLAG{content}

Example: FLAG{welcome_to_ctf}

🎯 Challenge Categories

🔓 Web Security (6 challenges)

Learn web application security fundamentals:

HTML Detective (50 pts) - HTML source code analysis
Cookie Inspector (75 pts) - Browser cookie investigation
Simple SQL Injection (150 pts) - Database bypass techniques
URL Parameter Manipulation (100 pts) - Parameter tampering
JavaScript Console Secrets (80 pts) - Console debugging
HTTP Headers Investigation (120 pts) - Header analysis

🔐 Cryptography (5 challenges)

Master encoding and encryption concepts:

Caesar Cipher Beginner (75 pts) - ROT13 decoding
Base64 Encoding (50 pts) - Base64 conversion
MD5 Hash Detective (100 pts) - Hash cracking basics
Hexadecimal Decoder (80 pts) - Hex to ASCII conversion
Binary Message (120 pts) - Binary to text conversion

🌐 Network Security (3 challenges)

Understand network protocols and analysis:

Port Knowledge Quiz (60 pts) - Common port identification
DNS Lookup Challenge (100 pts) - DNS record investigation
Network Protocol Identification (80 pts) - Protocol analysis

🔑 Password Cracking (3 challenges)

Learn password security principles:

Weak Password Analysis (90 pts) - Common password vulnerabilities
Password Strength Quiz (70 pts) - Security best practices
Hash Type Identification (60 pts) - Hash format recognition

🔍 Reverse Engineering (3 challenges)

Develop analysis and decoding skills:

ASCII Art Detective (100 pts) - ASCII decimal conversion
Simple XOR Cipher (150 pts) - XOR cryptography
File Signature Analysis (120 pts) - File type identification

Total: 20 educational challenges worth 1,635 points!

🔌 API Documentation

Authentication Endpoints

POST /register    - Create new user account
POST /login       - User authentication
GET  /logout      - End user session

Challenge Endpoints

GET  /dashboard           - User dashboard
GET  /challenges/<category> - Category challenges
POST /submit_flag         - Submit challenge solution
GET  /leaderboard        - Competition rankings

Response Format

{
  "success": "Operation successful message",
  "error": "Error description if failed"
}

🌐 Deployment

Deploy to Render

Fork this repository
Connect to Render:
- Visit render.com
- Create new Web Service
- Connect GitHub repository

Configure deployment:

Build Command: pip install -r requirements.txt
Start Command: python app.py
Environment: Python 3

Environment Variables (Optional):

FLASK_ENV=production
SECRET_KEY=your-secret-key-here

Deploy to Heroku

# Install Heroku CLI and login
heroku create your-app-name
git push heroku main

Deploy to AWS/DigitalOcean

Detailed deployment guides available in the docs/ folder.

🤝 Contributing

We welcome contributions! Here's how you can help:

Ways to Contribute

🐛 Bug Reports - Report issues you find
💡 Feature Requests - Suggest new features
🔧 Code Contributions - Submit pull requests
📚 Documentation - Improve docs and tutorials
🎯 New Challenges - Add more CTF challenges

Development Process

Fork the repository
Create a feature branch
```
git checkout -b feature/amazing-feature
```
Make your changes
Test thoroughly
Submit a pull request

Adding New Challenges

# Add to challenges list in app.py
{
    'title': 'Your Challenge Name',
    'description': 'Challenge description with instructions',
    'category': 'Web Security',  # or other category
    'points': 300,
    'flag': 'FLAG{your_solution_here}',
    'hint': 'Helpful hint for users',
    'challenge_data': 'Additional challenge data if needed'
}

Code Style

Follow PEP 8 for Python code
Use meaningful variable names
Add comments for complex logic
Test all new features

🔒 Security

Security Features

✅ Password Hashing - Werkzeug secure hashing
✅ Session Management - Secure user sessions
✅ Input Validation - Prevent injection attacks
✅ SQL Injection Protection - Parameterized queries
✅ XSS Prevention - Template escaping

Reporting Security Issues

If you discover a security vulnerability, please send an e-mail to: 📧 contact@theghostpacket.com

Please do not open public issues for security vulnerabilities.

📊 Project Statistics

20 Total Challenges across 5 categories
Educational Explanations for every challenge
Progressive Difficulty from Beginner to Medium
1,635 Total points available
Detailed Hints that teach concepts
500+ Lines of Python Code
800+ Lines of HTML/CSS/JS
Mobile Responsive Design
Real-Time Features with live explanations

🗺️ Roadmap

Version 2.0 (Planned)

Version 2.1 (Future)

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

MIT License

Copyright (c) 2024 TheGhostPacket

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
templates		templates
venv		venv
.gitignore		.gitignore
README.md		README.md
app.py		app.py
ctf.db		ctf.db
requirements.txt		requirements.txt

TheGhostPacket/cyberctf-platform

Folders and files

Latest commit

History

Repository files navigation