CTFdev

The following is a collection of information, advises and tips for CTF organizers, developers and content creators.

This is not intended to be used as a CTF players field guide,there are some excellent resources on the subject.

If you ever wanted to organize and conduct a CTF or you want to learn how to create challenges and target machines this is going to help you.

Fair warning

This is still heavily WIP, at this time it more like a dump of the things I would like to cover rather than a logically structured book but it will get there.

I am not a native english speaker and as such you may find a lot of typos (i try to keep them as low as i can) and a lot of hard to comprehend paragraphs.

It may be a bit more difficult to read but i would like to believe that the main ideas behind it will be understood.

From Who?

I am one of the main developers of https://echoCTF.RED a platform that was designed from the ground up to conduct capture the flag competitions and cyber-security events.

We have been using this platform for the past 10 years to conduct some of the most spectacular capture the flag competitions.

This book will try to encapsulate this knowledge of the past 10 years in a way that will be easily understood.

This does not mean that I am an authority on the subject, it just means i’ve seen a lot instances.

Why?

Why do such a guide you may ask? Why not?

• It seems that every month I will get a bunch of DM’s on our Discord from people who want to do their own CTF or create challenges or sponsor a CTF, but they dont know where to start.
• There seems to be an endless number of guides for CTF participants, but almost none for those who want to organize, conduct or develop CTF’s.
• I wanted to share my experiences with those looking to embark into this adventure and hopefully save them some pain and suffering down the road.