GZCTF - The GZ::CTF project, an open source CTF platform.

项目说明

<picture>
<source media="(prefers-color-scheme: dark)" srcset="assets/banner.dark.svg">
<img alt="Banner" src="assets/banner.light.svg">
</picture>

GZ::CTF

![publish]()
!
!license
![Crowdin]()
![codecov]()

![](https://
![QQ Group]()
![Discord]()

English, 简体中文, 日本語

GZ::CTF is an open source CTF platform based on ASP.NET Core.

> [!IMPORTANT]
>
> To save your effort, please read the documentation carefully before using:

> [!WARNING]
>
> Upgrade and migration considerations:
>
> 1. To upgrade the platform, simply pull the latest image and restart, and the database migration will be performed automatically. Images are published only to Docker Hub (gztime/gzctf) and GitHub Container Registry (ghcr.io/gztimewalker/gzctf/gzctf).
> 2. In general, downgrade operations are not supported. Upgrading with a large time span may result in data incompatibility, so please make sure to back up your data.
> 3. After the upgrade, there may be new configuration items and changes in file structure. It is recommended to consult the official documentation or the community.
> 4. If you are migrating to another branch project, please pay attention to whether the database structure has changed. The database after the change does not support rollback to the original .
> 5. The community and the official maintainers are not responsible for data loss, data incompatibility, and other issues. For issues with branch projects, please contact the corresponding project maintainer.

Features 🛠️

- Type of challenges: Static Attachment, Dynamic Attachment, Static Container, Dynamic Container

- Static Attachment: Shared attachments, any configured flag can be accepted.
- Dynamic Attachment: The number of flags and attachments must be at least the number of teams. Attachments and flags are distributed according to the teams.
- Static Container: Shared container templates, no dynamic flag is issued, and any configured flag can be submitted.
- Dynamic Container: Automatically generate and issue flags through container en , and flag of each team is unique.

- Dynamic Scores

- Curve of scores:

$$f(S, r, d, x) = \left \lfloor S \times \left[r + ( 1- r) \times \exp\left( \dfrac{1 - x}{d} \right) \right] \right \rfloor $$

Where $S$ is the original score, $r$ is the minimum score ratio, $d$ is the difficulty coefficient, and $x$ is the number of submissions. The first three parameters can be customized to satisfy most of the dynamic score requirements.

- Bonus for first three solves:
The platform rewards 5%, 3%, and 1% of the current score for the first three sol.

- Disable or enable challenges during the competition, and release new challenges at any time.
- Dynamic flag sharing detection, optional flag template, leet flag

About i18n 🌐

Currently, the platform supports multiple languages, and the translation progress is as follows:

Translated by Community

Translated by Machine and AI

These translations are not perfect, and we need your help to improve them.

If you are interested in contributing to the translation, please refer to the Crowdin project.

Demo 🗿

!index.webp
!game.list.webp
!game.challenges.webp
!game.scoreboard.webp
!admin.settings.webp
!admin.challenges.webp
!admin.challenge.info.webp
!admin.challenge.flags.webp
!admin.game.info.webp
!admin.game.review.webp
!admin.game.di.webp
!admin.teams.webp
!admin.instances.webp
!monitor.game.events.webp
!monitor.game.submissions.webp

Contributors 👋

<a href="
<img src=" />
</a>

CTF hosted with GZ::CTF 🏆

Some event organizers ha chosen GZCTF and successfully completed their competitions. Their trust, support, and timely feedback are the primary driving force behind the continuous impro of GZCTF.

International Events

Other Events

_These list is not in any particular order, and PRs are welcome for additions._

Special Thanks ❤️‍🔥

Thanks to NanoApe, the organizer of THUCTF 2022, for pro sponsorship and conducting Alibaba Cloud public network stress testing. This helped the service stability of the GZCTF standalone instance (16c90g) under the pressure of thousands of concurrent requests and 1.34 million requests in three minutes.

License 📄

GZCTF is dual-licensed:

1. Core Source Code: Licensed under the GNU Affero General Public License v3.0 (AGPLv3). This covers the main part of the project, granting you broad freedoms to use, modify, and distribute. See LICENSE.txt for details.

2. Restricted Components: Licensed under the custom GZCTF Restricted License (LicenseRef-GZCTF-Restricted).
- Usage and Distribution Permitted: You are free to use and redistribute the components as-is (unmodified), provided that all copyright notices and the license text are preserved.
- Modification and Deletion Prohibited: You may not modify, delete, create deri works of, or re these components without explicit written permission from the author.
- File List: The complete list of Restricted Components is defined in the PROPRIETARY_COMPONENTS.md file.
- Full License Text: Please refer to license/LicenseRef-GZCTF-Restricted.txt for the detailed terms.

When deploying a modified of GZCTF as a public service, you are required to:

Trademarks & Brand

See also the NOTICE file for consolidated copyright and trademark statements.

Stars ✨

![Stargazers over time]()

项目信息

开发语言：C#

Star 数：1606

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕The GZ::CTF project, an open source CTF platform.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。