Base
Hardened build
minimal ports, security patches applied at build time
CTFd
Azure
Security
1 variation
CTFd, the open source Capture The Flag platform: a challenge board, live scoreboard, teams and a full admin panel for running security competitions and training events.
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| CTFd on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
CTFd is a popular open source Capture The Flag competition platform used to run security training events, workshops and jeopardy style competitions. It provides a challenge board, a live scoreboard, individual or team play, solve tracking, hints and a complete administration panel for authoring challenges, flags and pages, so you can run an event instead of building a platform.
This image runs CTFd on a complete application, database and cache stack, assembled and ready rather than left for you to wire together. It suits security teams, educators and event organisers who want a self hosted CTF platform running in their own cloud account.
Why the cloudimg image
The cloudimg image runs CTFd on a hardened stack served by gunicorn behind a reverse proxy, with the database password, cache, application secret key and administrator password generated uniquely for your instance on first boot and stored in a root only file, so nothing ships with a known password. The first run setup is completed automatically and a demo challenge is seeded, so the board is a real event rather than an open setup wizard the first visitor could hijack. The deployment guide covers authoring challenges, running an event, pointing your domain and enabling HTTPS. 24/7 support is included.
Common uses
- Running jeopardy style Capture The Flag competitions and hackathons
- Hands on security training courses, workshops and internal skills events
- A self hosted challenge board and scoreboard you run in your own cloud account
More in Security
2F
2FAuth
Security
2FAuth, a self hosted vault for your two factor authentication accounts that stores the secrets and generates the one ti
Ad
acme-dns
Security
acme-dns, a limited scope DNS server with a REST API, purpose built to answer ACME DNS-01 challenges without exposing yo
addy.io
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
AliasVault
Security
AliasVault, an open source end to end encrypted password manager and private email alias service, secured on first boot.
Apache Directory
Security
Apache Directory Server, an extensible LDAP and Kerberos directory, ready to authenticate on first boot.
Apache SpamAssassin
Security
Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your ma