scoringengine - Scoring Engine for Red/White/Blue Team Competition

项目说明

![Documentation Status]()
![CI]()
![Co Status]()

Scoring Engine

Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface.

!Scoring Engine screenshot

Features

Architecture

Scoring Engine uses a distributed architecture with the following components:

| Component | Technology | Purpose |
|-----------|------------|---------|
| Web UI | Flask | Scoreboard, team management, administration |
| Task Queue | Celery | Distributed job scheduling and execution |
| Message Broker | Redis | Task queue backend and caching |
| Database | MySQL/MariaDB | Persistent storage for teams, services, and results |
| Reverse Proxy | Nginx | HTTP server and load balancing |

Supported Service Checks

Scoring Engine includes checks for common services out of the box:

| Category | Services |
|----------|----------|
| Network | ICMP, DNS, NFS |
| Web | HTTP, HTTPS, Elasticsearch, WordPress |
| Authentication | SSH, Telnet, LDAP, WinRM |
| File Transfer | FTP, SMB |
| Email | SMTP, SMTPS, IMAP, IMAPS, POP3, POP3S |
| Database | MySQL, PostgreSQL, MSSQL |
| Remote Desktop | RDP, VNC |
| VPN | OpenVPN |

Custom checks can be added by creating a Python class in scoring_engine/checks/.

Prerequisites

Docker Installation (Recommended)

Source Installation

For installing from source without Docker:

Quick Start

Build and start all services:

Or use the Makefile for con:

Once running, access the application at

Demo Credentials

Log in using any of the following credentials:

| Username | Password | Role |
|----------|----------|------|
| whiteteamuser | testpass | White Team (Admin) |
| team1user1 | testpass | Blue Team 1 |
| team2user1 | testpass | Blue Team 2 |
| team2user2 | testpass | Blue Team 2 |
| redteamuser | testpass | Red Team |

En

Reset the database before starting:

Run with sample data (demo mode):

Or combine both for a fresh demo:

Pre-built Docker Images

Pre-built images are a from both registries:

A images: base, bootstrap, engine, web, worker

Tags: latest, develop, tags (e.g., v1.1.0)

Airgapped Deployments

For competitions with no internet access:

See the Airgapped Deployment Guide for detailed instructions.

De

Makefile Commands

| Command | Description |
|---------|-------------|
| make build | Build all Docker images |
| make run | Start all services |
| make run-demo | Start with demo data (resets database) |
| make stop | Stop all services |
| make clean | Stop services and remo |
| make rebuild-new | Full rebuild with fresh database |
| make run-tests | Run unit tests with co |
| make build-integration | Build integration test en |
| make run-integration-tests | Run integration tests |

Running Tests

Run the linters and test suite before submitting changes:

To check all files: pre-commit run --all-files

Building Documentation Locally

Open docs/build/html/index.html in your browser.

Management

This project uses semantic . To bump :

See .md for detailed instructions.

Documentation

Full documentation is a at

License

Released under the MIT License.

项目信息

开发语言：Python

Star 数：139

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Scoring Engine for Red/White/Blue Team Competitions展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。