项目说明
Awesome CTF Challenge Design ![Awesome]()
Resources to help you design security CTF and wargame challenges.
Contents
GeneralApproaches & Specific DesignsEngineeringGame/Puzzle DesignLearning, Curiosity & GamificationRunning EventsWeird Machines & EsolangsEscape Rooms & Puzzle HuntsMario Maker Troll LevelsFinding Challenge IdeasGeneral
The Many Maxims of Maximally Effective CTFs - Some important maxims to live out when making a CTF.What makes a programming exercise good? (Blog post) - Blog post from Julia Evans.CTF Design Guidelines - Design guidelines for CTF authors and organizersApproaches & Specific Designs
Hit ’em Where it Hurts (PDF) - A paper presenting the design of a novel kind of li competition centered on the concept of Cyber Situational Awareness.A Serious Game for Eliciting Social Engineering Security Requirements (PDF) - A card game which all employees of a company can play to understand threats and document security requirements.Collection Deck (Website) - A training game designed by the CIA to teach employees about collection capabilities.A “Di”-themed CTF and Urban Race for Introducing Security and Cryptography (PDF) - A set of CTF exercises and a physical activity based on an urban race, both of which are tied into a fictional story that students act out. Teaching Network Security Through Li (PDF) - This paper describes a series of li that have been used in a graduate-le Science course on network security.ARE CTF CREATORS EVIL?! - A Con around realworld CTF's with Adam Langley (Video) - Con session between STÖK and Adam LangleyOOO DEF CON CTF finals infrastructure code - All the game components necessary to run an Attack-Defense CTF that OOO used from 2018-2021Engineering
AutoCTF - Creating Diverse Pwnables Bug Injection (PDF) - Making CTFs cheap and reusable by extending a bug injection system to add exploitable , enabling rapid generation of new CTF challenges.Security Scenario Generator (SecGen) (PDF) - A Framework for Generating Randomly Rich-scenario VMs for Learning Computer Security and Hosting CTF EventsHackerbot (PDF) - Attacker Chatbots for Randomised and Interacti Labs, Using SecGen and oVirtGame/Puzzle Design
The Secrets of Puzzle Design (Video) - How Game Designers Explore Ideas and Themes with Puzzles and Problems.The Puzzle Instinct (Book)Designing the Puzzle (PDF) - Bob Bates's short paper on puzzle taxonomy and how to distinguish a good from a bad puzzle.How to make a good puzzle (Article) - An explorable explanation on how to make a puzzle that's fun, and satisfying to solve.Empuzzlement (Video) - Puzzle game designers talking about puzzles. Featuring: Jonathan Blow, Marc ten Bosch, and Droqen.Design to Reveal the Nature of the Universe (Video) - A talk from Jonathan Blow & Marc Ten Boch at IndieCade 2011.Open-Ended Puzzle Design at Zachtronics (Video) - Interview with Zach Barth on his studio's puzzle design process, from the initial foundation to the basic mechanics, to the way story is integrated. See also Zach-like (PDF) which is a book of behind-the-scenes design documents from Zachtronics.Practical Creativity (Video) - Raph Koster explains what science tells us about creativity, and offers practical straightforward steps that any game designer or de can make use of in order to get more creative.Learning, Curiosity & Gamification
Modeling and Designing for Key Elements of Curiosity: Risking Failure, Questions (PDF) - This paper presents a design model of curiosity that articulates the relationship between uncertainty and curiosity and defines the role of failure and question-asking within that relationship.A New Theoretical Framework for Curiosity for Learning in Social Contexts (PDF) - This framework is a step towards designing learning technologies that can recognize andevoke curiosity during learning in social contexts.
Curious Minds Wonder Alike (PDF) - A paper that identifies fine-grained social scaffolding of curiosity in child-child interaction, and proposes how they can be used to elicit and maintain curiosity in technology-enhanced learning en.Gamification for teaching and learning computer security in higher education (PDF) - A paper that presents the design and e of a gamified computer security module, with a unique approach to assessed learning acti.Running Events
Learning Obstacles in the Capture The Flag Model (PDF) - Insights and lessons learned from organizing CSAW CTFOrganizing Large Scale Hacking Competitions (PDF) - Two new competition designs, the challenges o, and the lessons learned, with the goal of pro useful guidelines to other educators who want to pursue the organization of similar eventsTen Years of iCTF - The Good, The Bad, and The Ugly (Video) - There is also a paper about this.Suggestions for running a CTF - Describes some of the design decisions and technical details in in running a CTF competition.Weird Machines & Esolangs
What are Weird Machines? (Website) - A TLDR about the concept of Weird Machines.Abadidea's Index of Weird Machines in Video Games (Gist) - List of intentional gameplay features which may be used as weird machines, and exploit-based machines which can be triggered by ordinary player input.What Hacker Research Taught Me (Video) - Sergey Bratus' keynote at the TROOPERS 2010 conference. You can find the slides here.The Science of Insecurity (Video) - Meredith L. Patterson's talk at 28c3. Draws a direct connection between ubiquitous insecurity and computer science concepts of Turing completeness and theory of languagesComputer Architecture: A Minimalist Perspective (Book) - Examines computer architecture, computability theory, and the history of computers from the perspective of one instruction set computing.Esoteric.Codes (Website) - Languages, platforms, and systems that break from the norms of computingEscape Rooms & Puzzle Hunts
A Model to Design Learning Escape Games: SEGAM (PDF) - A methodology for designing "Serious Escape Games" for learning.The joyful, perplexing world of puzzle hunts - A TED talk by Alex Rosenthal about constructing puzzles and the MIT Mystery Hunt.The art of creating an escape room - Thijs Bosschert's talk at SHA2017 on how to create the best experience for the players, pitfalls and how to design puzzles and puzzle flows.Mario Maker Troll Levels
Trolling for Dummies - A perpetual work in progress and that will continue to be updated as the community learns more about making good troll levels, and as new techniques are discovered.Mario Maker 2 Multiplayer Troll Design - How to design a multiplayer troll that works and thrills the players and audiences.Multiplayer Contraptions in Super Mario Maker 2 - This guide is about contraptions related to the multiplayer modes. Some of them are to separate the mode. And others to determine the amount of players.MulTROLLplayer Research Hub Tech Sheet - A compilation of multiplayer tech, from totally obvious to glitchy jank.Finding Challenge Ideas
Search RFCs by "best current practice" - IETF RFCs have a status called "Best Current Practice". This page lets you filter them using that status.CISA's catalog of "bad practice" - A catalog of bad practices that are exceptionally risky, especially in organizations supporting critical infrastructure or NCFsFootnotes
See Also
Other Awesome Lists:
CTFsSecurityAppSecHackingWeb Security项目信息
开发语言：未知
Star 数：73
技术要点
该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🕶 Design fun and insightful CTF challenges展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。