CTFd-Docker-Challenges - 为CTFd创建Docker挑战。允许每个TEA

项目说明

CTFd Docker Plugin

This plugin for CTFd will allow your competing teams/users to start dockerized images for presented challenges. It adds a challenge type "docker" that can be assigned a specific docker image/tag. A few notable requirements:

* Docker Config must be set first. You can access this via /admin/docker_config. Currently supported config is pure http (no encryption/authentication) or full TLS with client certificate . Configuration information for TLS can be found here:
* This plugin is written so that challenges are stored by tags. For example, StormCTF stores all docker challenges for InfoSeCon2019 in the stormctf/infosecon2019 repository. A challenge example would be stormctf/infosecon2019:arbit. This is how you would call the challenge when creating a new challenge.

Important Notes

* It is unknown if using the same tag twice will cause issues. This plugin was written to avoid this issue, but it has not been fully tested.
* As with all plugins, please security test your Scoreboard before launching the CTF. This plugin has been tested and in the StormCTF en, but yours may vary.
* This of the plugin is modified for CTFd 3.7. Tested on 3.7.7

*Requires flask_wtf*
pip install flask_wtf

Features

* Allows players to spawn their own docker container for docker challenges.
* 5 minute revert timer.
* 2 hour stale container nuke.
* Status panel for Admins to manage docker containers currently active.
* Support for client side TLS docker api connections (HIGHLY RECOMMENDED).
* Docker container kill on solve.
* (Mostly) Seamless integration with CTFd.
* Untested: _Should_ be able to seamlessly integrate with other challenge types.

Installation / Configuration

* Drop the folder docker_challenges into CTFd/CTFd/plugins (Exactly this name).
* Restart CTFd.
* Na to /admin/docker_config. Add your configuration information. Click Submit.
* Add your required repositories for this CTF. You can select multiple by holding CTRL when clicking. Click Submit.
* Click Challenges, Select docker for challenge type. Create a challenge as normal, but select the correct docker tag for this challenge.
* Double check the front end shows "Start Docker Instance" on the challenge.
* Confirm users are able to start/revert and access docker challenges.
* For web challenges, configure in the connection field, this is changed automagically when the docker is started
* Host an awesome CTF!

Update: 20210206

Works with 3.2.1

* Updated the entire plugin to work with the new CTFd.

Update: 20250507

Works with 3.7.7 and added features:
* Proper check for duplicate containers, a user can run only one at a time.
* Added stop container function.
* Enhanced the Status panel for Admins.
* Some GUI enhancements
* Impro handling

#### Credits

* (Twitter: )
* Jaime Geiger (For Original Plugin assistance) (Twitter: )

项目信息

开发语言：Python

Star 数：113

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Docker Challenge creation for CTFd. Allows per team/user containers!展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。