google/google-ctf
Google Ctf
Dieses Projekt ist eine Capture-the-Flag-Plattform und eine Cybersecurity-Trainingsumgebung. Es bietet ein Framework für das Deployment von Sicherheitsherausforderungen und die Verfolgung des Teilnehmerfortschritts über eine Echtzeit-Punktetabelle.
Die Plattform dient als Scoreboard für Sicherheitswettbewerbe und als Managementsystem, das absichtlich verwundbare Infrastrukturen für das Üben von Reverse Engineering und Software-Exploitation-Techniken hostet. Sie verwaltet die Entdeckung geheimer Strings innerhalb dieser Rätsel, um die Team-Ranglisten zu bestimmen.
Das System deckt das Management von Cybersecurity-Wettbewerben, das Deployment von Sicherheitsherausforderungen und das Training in Schwachstellenforschung ab. Es nutzt ein Tracking-System, um die Gesamtpunktzahl basierend auf der Anzahl der gelösten Sicherheitsherausforderungen zu überwachen.
Features
- CTF Competition Hosting Platforms - Provides a complete web platform for hosting CTF events with challenges, team management, and real-time scoring.
- Vulnerable Training Environments - Provides deliberately insecure applications and labs for practicing reverse engineering and exploitation techniques.
- Vulnerable Infrastructure - Provides intentionally vulnerable infrastructure configured with security weaknesses for research and competition testing.
- Security Competition Platforms - Serves as a platform for participating in capture-the-flag events and challenge-based security training.
- Real-Time Scoreboards - Maintains a real-time leaderboard by mapping solved security puzzle identifiers to team identities and points.
- Cybersecurity Training Labs - Provides curated training environments and exercises for developing offensive and defensive cybersecurity expertise.
- Flag Validations - Verifies successful exploitation of challenges by checking if the participant submitted the correct secret string.
- Security Challenges - Deploys interactive environments and deliberately insecure applications for practicing offensive and defensive security skills.
- Challenge Solving Utilities - Provides the environment for identifying and decoding hidden flags through reverse engineering and exploitation.
- Competitive Progress Visualizations - Provides competitive progress visualizations through leaderboards and rankings based on solved security puzzles.
- Containerized Isolations - Uses containerization to isolate each security puzzle, ensuring environment reproducibility and preventing cross-challenge interference.
- Security Training Platforms - Source code and challenges from annual security competitions.
