A custom platform for hosting controlled, realistic Android mobile hacking challenges in CTF competitions.
DroidGround is a flexible playground for Android CTF challenges that provides a controlled environment for hosting realistic mobile hacking exercises. It addresses the limitations of traditional CTF setups where Android APK flags are easily extractable, enabling organizers to create runtime-focused challenges that require actual exploitation. The platform allows fine-grained control over features like terminal access, file browsing, and Frida scripting to constrain participants appropriately.
CTF organizers, cybersecurity trainers, and penetration testers who need to create and run Android-based security challenges. It's particularly valuable for those hosting competitions or training sessions focused on mobile application security.
Developers choose DroidGround because it provides a realistic Android hacking environment with modular controls that prevent trivial flag extraction. Its multi-team support reduces deployment costs, and its integration with tools like Frida and scrcpy enables sophisticated challenge designs not possible with traditional CTF setups.
A flexible playground for Android CTF challenges.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Integrates scrcpy to stream the Android device screen, enabling live interaction and a realistic hacking experience as participants see the app in real-time.
Allows granular control over features like terminal access and file browsing via environment variables, letting organizers tailor challenge constraints precisely.
Supports both jailed mode for preloaded scripts and full mode for arbitrary scripts, facilitating diverse dynamic analysis and instrumentation challenges.
Enables sharing a single instance across multiple teams with team tokens, reducing deployment costs for CTF competitions, as highlighted in the README.
Requires installation of multiple tools like frida, node, adb, and JDK, along with Docker knowledge, making deployment non-trivial for newcomers.
Enabling features like Frida Full Mode or Terminal grants participants full device control, necessitating careful setup to prevent unintended access or breaches.
The platform is designed exclusively for Android challenges, lacking support for iOS or other mobile ecosystems, which limits its scope in broader CTFs.
Relies on scrcpy and ADB, which may have compatibility or stability issues across different Android versions, adding maintenance overhead.