An open-source platform for developing, running, and administering Capture the Flag (CTF) competitions on real IT infrastructure.
echoCTF.RED is an open-source cybersecurity framework for building and running Capture the Flag competitions and security training exercises on real IT infrastructure. It allows organizers to create controlled environments where participants can practice offensive and defensive security skills through real-life scenarios. The platform provides tools for target deployment, flag management, activity tracking, and competition administration.
Security professionals, educators, and organizations looking to host CTF competitions, conduct penetration testing training, or run security awareness exercises. It's ideal for businesses, universities, and training institutes that need a scalable, self-hosted platform.
Developers choose echoCTF for its completeness and real-infrastructure approach, offering a modular, expandable system with Docker integration, detailed activity tracking, and advanced firewall features not found in simpler CTF platforms.
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Provides configurable event settings, team management, and leaderboards, covering all organizational aspects from registration to dynamic start/end dates.
Supports Docker-based targets with dynamic networks, environment variables, and health checks, enabling authentic penetration testing scenarios on real infrastructure.
Allows unlimited flags per target, unique flags per player/team, and dynamic hints, offering high customization for challenge design.
Includes detailed player and team activity streams, network visualization, and integrated OpenBSD firewall features for thorough tracking and security.
Features standalone applications for Discord/Twitter bots, websocket leaderboards, and real-time visuals, facilitating easy customization and integration.
The Docker compose version lacks dynamic firewall support and network tracking, making it unsuitable for production without complex Ansible playbook deployment.
Requires Ansible playbooks for production environments, indicating a steep setup curve and need for infrastructure management skills.
The system ships with no data, forcing organizers to create all challenges, targets, and rules from scratch, which is time-intensive and resource-heavy.