Base
Hardened build
minimal ports, security patches applied at build time
CTFd on Ubuntu 24.04 LTS
Azure
Security
CTFd, the open source Capture The Flag platform: a challenge board, live scoreboard, teams and a full admin panel for running security competitions and training events.
Overview
CTFd is a popular open source Capture The Flag competition platform used to run security training events, workshops and jeopardy style competitions. It provides a challenge board, a live scoreboard, individual or team play, solve tracking, hints and a complete administration panel for authoring challenges, flags and pages, so you can run an event instead of building a platform.
This image runs CTFd on a complete application, database and cache stack, assembled and ready rather than left for you to wire together. It suits security teams, educators and event organisers who want a self hosted CTF platform running in their own cloud account.
Why the cloudimg image
The cloudimg image runs CTFd on a hardened stack served by gunicorn behind a reverse proxy, with the database password, cache, application secret key and administrator password generated uniquely for your instance on first boot and stored in a root only file, so nothing ships with a known password. The first run setup is completed automatically and a demo challenge is seeded, so the board is a real event rather than an open setup wizard the first visitor could hijack. The deployment guide covers authoring challenges, running an event, pointing your domain and enabling HTTPS. 24/7 support is included.
Common uses
- Running jeopardy style Capture The Flag competitions and hackathons
- Hands on security training courses, workshops and internal skills events
- A self hosted challenge board and scoreboard you run in your own cloud account
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.