A simple security capture the flag framework designed to make running your own contests as easy as possible.
NightShade is a security capture the flag (CTF) framework that enables organizations to create and manage cybersecurity competitions. It provides a complete platform for running various CTF formats, including jeopardy, traditional, and blind-style contests, with built-in challenge management and user tracking.
Security educators, training organizations, cybersecurity clubs, and event organizers who want to run their own CTF competitions without building custom infrastructure.
Developers choose NightShade because it offers a ready-to-use, self-hosted CTF platform with multi-tenant support, multiple competition formats, and straightforward setup using familiar Django tooling.
A simple capture the flag framework.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports jeopardy, traditional listing, and blind-style competitions, as shown in the screenshots, providing flexibility for different event types without custom development.
Designed to run multiple independent contest sites from a single installation, ideal for organizations hosting several competitions simultaneously, as mentioned in the installing section.
Includes a Django admin panel for managing contests, users, and configurations, streamlining backend operations and reducing the need for custom admin tools.
Built-in system for creating and displaying security challenges with detailed pages, as evidenced by the challenge screenshot, minimizing setup effort for organizers.
Installation requires managing database schemas with commands like 'migrate_schemas' and using prefixed 'tenant_command', which can be confusing and error-prone for users new to Django multi-tenancy.
The README focuses on basic installation with screenshots but lacks detailed guides on customization, deployment best practices, or troubleshooting, leaving users to rely on Django expertise.
The README explicitly warns that 'things may be horrible wrong' as it's a new project, indicating potential bugs, breaking changes, and lack of production readiness for critical events.
As a specialized framework, it has fewer community plugins, integrations, and support compared to established alternatives like CTFd, which may limit extensibility and problem-solving resources.