A Dockerized training platform offering six distinct web-based CTF challenges designed to teach and practice web security exploitation techniques.
A training platform with different Scenarios of CTF Web Challenges
This tool is primarily used by security enthusiasts, educators, and penetration testers to practice and teach web security vulnerabilities in a controlled environment. It provides hands-on experience through Capture The Flag (CTF) style challenges that simulate real-world web attacks. Users can deploy it locally using Docker or on private servers for training purposes.
This tool is intentionally vulnerable and should never be deployed on public-facing servers to avoid exploitation. It is designed solely for educational and training purposes in a controlled environment. Users should customize flags before deployment to maintain challenge integrity.
Install Docker from http://docker.com
Run the container using: docker run --name web-ctf -d -it -p 80:80 hightechsec/web-ctf-container
To install manually, clone the repo: git clone https://github.com/HightechSec/web-ctf-container
Change the flags in all flag.php files inside each challenge folder
Copy index.php and all challenge folders to your web server directory
Alternatively, build the Docker image manually with: docker build -t "web-ctf-container" .
Run the built image with: docker run --name web-ctf -d -it -p 80:80 web-ctf-containerdocker run --name web-ctf -d -it -p 80:80 hightechsec/web-ctf-container
Runs the pre-built Docker container exposing port 80 for web access
docker exec -ti web-ctf bash
Accesses the running container's shell to modify challenge files
nano flag.php
Edits the flag.php file inside the container to change challenge flags
git clone https://github.com/HightechSec/web-ctf-container
Clones the repository for manual installation or customization
docker build -t "web-ctf-container" .
Builds the Docker image locally from the cloned repository
docker run --name web-ctf -d -it -p 80:80 web-ctf-container
Runs the locally built Docker image