FYP 17059

Han Yu

Supervisor: Dr. S. M. Yiu

A CTF Platform for Cybersecurity Training in HKU

Project Introduction
Motivation of building such a CTF platform

To promote and improve computer security education in the University of Hong Kong, HKU is planning to establish a customized Capture the Flag (CTF) platform used for CTF competition and exercise.

The project is aimed to seek a way for better combing the challenges with CTF platform so as to make it adaptable when holding a CTF competition. …

Background of Capture the Flag Competition

Capture the Flag (CTF) is one of these events aimed at selecting skilled students or professionals in different areas in cyber security. It has attracted a lot of young participants and professionals all over the world to take part in since it is first held all around the world in 1990s. (Harmon, 2016) …

Comparison of CTFd and FBctf

By now, the default functionalities of platforms FBctf and CTFd have been analyzed and this section will present the comparison of game interface design, administrator control and source code. …

This project chose FBctf to build on

This project chose FBctf to build on

Web Attack Servers

In this section, four chosen challenges will be introduced and theories behind them will be discussed in details. In particular, some solutions to the problems will be shown.

These chosen challenges include direct modification of web source code and cache, simple cryptography function, SQL injection and python script programming.

Please click on the four images below to explore the details of web servers.



Web Attack 1
Web Attack 2
Web Attack 3
Web Attack 4
Set Up Environment

FBctf can only be installed in Ubuntu 16.04 version.

Web servers can be held either on Linux or Windows platform…