TDCTF ECOSYSTEM • CAPTURE THE FLAG (CTF) PLATFORM

TDCTF — Build, run, and scale Capture The Flag (CTF) events.

TDCTF is an open-source Capture The Flag (CTF) platform and cybersecurity orchestration ecosystem. Deploy multi-category challenges, automate infrastructure with TDCTL, and manage live competitions with real-time scoring.

136 stars
4 repos
Actively maintained
TDCTF Ecosystem

TDCTF Platform & Orchestration.

TDCTF connects competition software, challenge infrastructure (TDCTL), bot integrations (TDBOT), and backup tooling (TDBAK) for CTF organizers and security teams.

github.com/farishhz
Core Platform

TDCTF

Active

CTF platform for managing events, challenges, teams, scoreboards, and admin operations.

Stack

TDCTL

Active

CLI orchestrator for containerized CTF challenges with Docker lifecycle, TTL controls, dynamic ports, and tunnel exports.

Stack

TDBOT

Active

Multi-server Discord bot with a Next.js dashboard, realtime first bloods, live scoreboards, and CTF monitoring.

Stack

TDBAK

Active

Automated HA PostgreSQL database backup system for CTF deployments with scheduled snapshots, retention policies, and GitHub Actions.

Stack
TDCTF

platform

TDCTF Platform

Platform for CTF events, challenges, teams, admins, and scoring.

infra

HA PostgreSQL

Self-hosted High Availability PostgreSQL database & data layer.

tool

TDBOT

Discord bot connected to TDCTF event data.

tool

TDBAK

PostgreSQL database backup CLI using Git branches as snapshot history, with encryption, scheduling, and GitHub Actions.

tool

TDCTL

CLI for Docker challenge runtimes, TTL, ports, and tunnels.

DockerTTLTCP TunnelsPinggybore.pubHTTP TunnelsNgrokCloudflaredLocalTunnel

infra

Kubernetes Cluster

Kubernetes orchestration & cluster deployment target for the TDCTF ecosystem.

tool

TDBCL

Blockchain challenge launcher for instantiating EVM RPC nodes and smart contracts.

TDCTF FEATURES

Core TDCTF platform features for CTF events, teams, challenge deployment, dynamic scoring, and admin workflows.

Scoreboard

Track event standings and scoring during competitions.

Event Management

Manage CTF event pages, challenges, teams, and scoring.

LIVEEvent 01
NEXTEvent 02
HOLDEvent 03

Dynamic Points

Configure dynamic challenge points for event scoring.

Challenge Adecay -10
MAX 200MIN 100STEP 10
1st
200
2nd
190
3rd
180

Multi-Task Challenges

Support challenges with multiple required answers.

Teams

Support team-based participation for CTF events.

team-01
team-02

Challenge Delivery

Publish challenge content for organizers and players.

draftpublish
FILESHINTSFLAGS
player solve─>score update

Flag Placeholders

Use configurable flag formats for challenge content.

xxxxx{xxxx_xx_xxxx_xxxx_0_xx00}

TDCTL Integration

Connect platform workflows to challenge infrastructure.

$ tdctl sync

ok sync success

$ tdctl up chall1

-> container build

-> export tunnel

ok Endpoint Tunneling: https://tunnel-abcd1234.ngrok.io

POWERED BY TDCTF

Real deployments, community platforms, and experimental infrastructure powered by the TDCTF ecosystem.

TDCTF
ACTIVE

TDCTF

Deployment for the TDCTF competition, utilizing the modern TDCTF core engine.

CTF EventCommunity
Open page →
TDCTF
ACTIVE

TDCTF

Official TDCTF event deployment for running Capture The Flag competitions.

CTF EventCommunityOfficial
Open page →
CTF - COMPFEST
LEGACY

CTF - COMPFEST

The challenges are designed to simulate real-world cybersecurity problems and improve participants’ problem-solving skills.

CTF EventLegacy
Open page →
CTF - COMPFEST
LEGACY

CTF - COMPFEST

Improve your skills through real hands-on experience and challenges. Build your confidence and prepare yourself for the future

CTF EventCommunityLegacy
Open page →
TDCTF
CUSTOMIZED

TDCTF

Older TDCTF event deployment built with a previous TDCTF release.

LabsTrainingModified
Open page →
TDCTF QUICK START

Deploy and run the TDCTF platform or orchestrate challenges with TDCTL in minutes. Watch the walkthrough when you need the full flow.

TDCTF DEMO
TDCTF Demo Walkthrough
0:00 / 3:35
SETUP NOTES

Review env vars and deployment notes before running the stack.

bash

$ git clone https://github.com/farishhz/tdctf

$ cd tdctf

$ npm install

$ npm run setup

$ npm run dev

✓ Ready in 1.4s at http://localhost:3000

FREQUENTLY ASKED QUESTIONS

Capture The Flag & Platform FAQ

Everything you need to know about TDCTF, competition formats, challenge architecture, and deployment workflows.

What is TDCTF?

TDCTF is an open-source Capture The Flag (CTF) platform and cybersecurity orchestration ecosystem. It empowers universities, cybersecurity clubs, and security teams to build, deploy, and scale jeopardy-style and attack-defense competitions with dynamic scoring and automated challenge orchestration.

What is a Capture The Flag (CTF) cybersecurity competition?

A Capture The Flag (CTF) competition is an information security exercise where participants solve hands-on cybersecurity challenges across categories such as Web Exploitation, Cryptography, Reverse Engineering, Binary Exploitation (Pwn), Digital Forensics, and OSINT. Upon successfully solving a problem, competitors retrieve a secret string called a 'flag' (e.g. TDCTF{...}) to earn points.

What CTF challenge categories and formats does TDCTF support?

TDCTF natively supports Jeopardy-style and Attack-Defense formats across all standard disciplines: Web Exploitation, Binary Exploitation (Pwn), Reverse Engineering, Cryptography, Digital Forensics, and OSINT. Challenges can be hosted as static files or isolated, containerized dynamic sandboxes.

How do organizers deploy challenges using TDCTL?

TDCTL is TDCTF's dedicated command-line orchestrator. Problem authors can initialize challenge templates, build reproducible Docker containers, verify solution scripts locally, and deploy isolated challenge instances to Kubernetes or remote servers with simple CLI commands.

Is TDCTF open-source and free to self-host?

Yes. TDCTF is 100% open-source under the MIT license. You can clone the repository, customize the UI, integrate your own authentication, and run competitions without licensing fees or participant limits.