CTFd
Docker Compose
CTFd | Docker Compose | |
---|---|---|
15 | 390 | |
5,327 | 32,471 | |
1.3% | 1.0% | |
8.8 | 9.6 | |
9 days ago | 3 days ago | |
Python | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CTFd
-
Host your own CTF for free 💸 (CTFd Setup Guide)
During the last weekend, a small cyber security club at my town organized their first online CTF competition. I offered to take care of the infrastructure since I've been tinkering with CTFd for a couple of weeks and surprisingly everything went well! (Except two server outages that didn't last long 😁) That's why I'm here sharing with you the process of how I set up, configured, and monitored a CTF platform that handled 150+ users simultaneously totally FOR FREE 💲
-
How to keep an HTTP connection alive for 9 hours
Under the hood, we use the open source CTF platform, CTFd. CTFd has its own system for registration and login. However, we wanted to use our own registration landing event for style and tracking purposes. Here are the requirements from our marketing team:
-
Creating Competition Platforms
Currently we use our CTFd fork, containerised and hosted on DigitalOcean. Major problems are that it's a freemium software, so for questions that might need execution of code in some programming language, we'll have to pay for it (and our club can't afford that). Questions are mostly MCQ or Fill in the Box.
- Creating CTFs for College Club
-
316ctf: Beginner CTF
Thanks to our sponsors Anderson University (SC) & CTFd
-
Building a Hack The Box alternative for educational purposes
Also, I would suggest using ctfd for management, with some plugins you can make it do most of what you need https://ctfd.io/ .
-
CTF Party - Novice to Professional
Are you using ctfd? https://ctfd.io/
-
Announcing Beast - An open source Jeopardy style CTF creation and management tool!
I think it's a misnomer to say that CTFd is proprietary. While CTFd does have a hosting platform that uses closed source code, CTFd itself is open core and open source under the Apache 2 license. My company and I put a lot of effort into maintaining the open source version of CTFd while still being sustainable.
-
Intentionally vulnerable networks for hackers
TryHackMe and CTFd might be worth a look.
-
How To Setup Your CTFd Platform With HTTPS And SSL
If you want to organize and host a CTF event, one of the best and easiest options available for managing this is CTFd.
Docker Compose
-
Deploy a Grafana dashboard with Docker on AWS EC2
sudo curl -L https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m) -o /usr/local/bin/docker-compose sudo chmod +x /usr/local/bin/docker-compose
- Docker Compose: `version` is obsolete
-
12 Factor: 13 years later
Solutions are many, and could include Docker Compose, VS Code dev containers, Telepresence, Localstack or setting up temporary AWS accounts as a development environment for serverless applications.
-
Let's write a simple microservice in Clojure
Using Docker Compose to run Postgres and any third-party services locally provides a streamlined and consistent development environment. Developers can define services in a docker-compose.yml file, which enables them to configure and launch an entire stack with a single command. In this case, Postgres is encapsulated within a container with predefined configurations. Docker Compose also facilitates easy scaling, updates, and isolation of services, enhancing development efficiency and reducing the setup time for new team members or transitioning between projects. It encapsulates complex configurations, such as Postgres' performance monitoring and logging settings, in a manageable, version-controlled file, simplifying and replicating the service setup across different environments.
- Live reload em Go com docker e compile daemon
-
Docker compose, orchestrating and automating services
“Compose simplifies the control of your entire application stack, making it easy to manage services, networks, and volumes in a single, comprehensible YAML configuration file. Then, with a single command, you create and start all the services from your configuration file.” - Docker documentation
-
Hosting a simple docker-compose app with Nginx and generate a SSL with certbot on digitalocean droplet
curl -fsSL https://get.docker.com -o get-docker.sh sudo sh get-docker.sh # Install docker compose sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose # Apply executable permissions to the binary sudo chmod +x /usr/local/bin/docker-compose # Run Project docker-compose up -d
-
One Minute: Compose
Docker,
-
How to Set Up a Docker Container
This foundation now opens the door to even more powerful concepts. You can explore more advanced concepts such as container networking, streamlining the management of complex applications with Docker Compose, and how to make your application data persistent using volumes.
-
Use same Dockerfile for Dev & Production
In many projects that are containerized, especially in cases where development is also done locally with docker-compose, teams often have two Dockerfiles, 1 for Development, the other for Production. If you happen to have multiple environments like pre-prod, staging and so on, some teams could have different Dockerfiles for these environments.
What are some alternatives?
RootTheBox - A Game of Hackers (CTF Scoreboard & Game Manager)
supervisor - Supervisor process control system for Unix (supervisord)
awesome-ctf - A curated list of CTF frameworks, libraries, resources and softwares
LibreNMS-docker - LibreNMS Docker image
ctf - Ctf solutions from p4 team
terraform - Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
the-littlest-jupyterhub - Simple JupyterHub distribution for 1-100 users on a single server
Portainer - Making Docker and Kubernetes management easy.
snoop - Snoop — инструмент разведки на основе открытых данных (OSINT world)
Cloud-Init - unofficial mirror of Ubuntu's cloud-init
Awesome-DevSecOps-Platforms - A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
k3s - Lightweight Kubernetes