A CTF leaderboard for the submission of flags during a CTF challenge. Built using Django.

Last update: Jan 17, 2022

Related tags

Overview

🚩 CTF Leaderboard

The goal of this project is to provide a simple web page to allow the participants of an CTF to enter their found flags. Also the live overview over all found flags gives a more competitive feeling to the game.

This app is written using Python 3 and the Django web framework.

Features

Participants can submit flags found during the CTF challenge
Live reload on the leaderboard overview
Simple administration through the Django admin UI (at /admin)
Custom landing page through the Content-model in the DB for instructions, links and screenshots

Getting started

Create and activate a virtual environment for the app:

$ python3 -m venv venv
$ source venv/bin/activate

Install all the necessary dependencies:

$ python3 -m pip install -r requirements.txt

Copy the .env.dist file to a .env file and make suitable adjustments (SECRET_KEY is important).

Create the database through migration and create a superuser for the admin UI (at /admin):

$ python3 manage.py migrate
$ python3 manage.py createsuperuser
$ python3 manage.py collectstatic

Run the server:

$ python3 manage.py runserver

Participant-Name-Format (name e.g. "Group B" in the screenshot): max. 20 chars
Name-Format (custom_name e.g. "Maurice, Gabriel" in the screenshot): max. 40 chars [a-zA-Z0-9_ ,]*
Flag-Format (secret): max. 200 chars [a-zA-Z0-9_]+

Feature ideas

This is a list of features some users requested but still need to be implemented. Feel free to implement one of them and submit a pull request. Thank you! Hint: we are roughly following the PEP 8 guideline using autopep8.

Crown the winner of the CTF who first found all the flags
Allow the creation of multiple pages (not only one homepage)
Enable multiple simultaneous CTFs through a list of available CTFs or unique URLs

Comments

Bump django from 4.0.7 to 4.0.8
Bumps django from 4.0.7 to 4.0.8.

Commits

7d5cb49 [4.0.x] Bumped version for 4.0.8 release.

23f0093 [4.0.x] Fixed CVE-2022-41323 -- Prevented locales being interpreted as regula...

4a30e0d [4.0.x] Set date and added stub notes for 4.0.8 and 3.2.16 releases.

898f0aa [4.0.x] Added CVE-2022-36359 to security archive.

60e6bae [4.0.x] Post-release version bump.

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django from 4.0.6 to 4.0.7
Bumps django from 4.0.6 to 4.0.7.

Commits

e9e9729 [4.0.x] Bumped version for 4.0.7 release.

b7d9529 [4.0.x] Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2eb7ded [4.0.x] Adjusted version 4.0.7 release notes.

baeffe8 [4.0.x] Ignored 080359c4c5242ef69ac8c58c92f240e71121ffd7 formatting changes i...

080359c [4.0.x] Fixed warnings per flake8 5.0.0.

1a9f079 [4.0.x] Fixed collation tests on MySQL 8.0.30+.

b8b449f [4.0.x] Adjusted release notes for 4.0.7 and 3.2.15.

2c2b748 [4.0.x] Added release date and stub release notes for 4.0.7 and 3.2.15 releases.

f78b18f [4.0.x] Fixed #33820 -- Doc'd "true"/"false"/"null" caveat for JSONField key ...

48501c8 [4.0.x] Fixed RelatedGeoModelTest.test08_defer_only() on MySQL 8+ with MyISAM...

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django from 4.0.4 to 4.0.6
Bumps django from 4.0.4 to 4.0.6.

Commits

caad462 [4.0.x] Bumped version for 4.0.6 release.

c732152 [4.0.x] Updated man page for Django 4.0.6.

0dc9c01 [4.0.x] Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) ag...

a2b88d7 [4.0.x] Fixed typo in docs/topics/signals.txt.

2b901c1 [4.0.x] Fixed GEOSTest.test_emptyCollections() on GEOS 3.8.0.

4d20d2f [4.0.x] Fixed docs build with sphinxcontrib-spelling 7.5.0+.

8a294ee [4.0.x] Added stub release notes and release date for 4.0.6 and 3.2.14.

1c28443 [4.0.x] Fixed CoveringIndexTests.test_covering_partial_index() when DEFAULT_I...

0f3b250 [4.0.x] Fixed #33789 -- Doc'd changes in quoting table/column names on Oracle...

6661c48 [4.0.x] Updated OWASP Top 10 link in security topic.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django from 4.0.2 to 4.0.4
Bumps django from 4.0.2 to 4.0.4.

Commits

89807fb [4.0.x] Bumped version for 4.0.4 release.

00b0fc5 [4.0.x] Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against...

8008288 [4.0.x] Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), a...

78e553b [4.0.x] Fixed #33628 -- Ignored directories with empty names in autoreloader ...

7700084 [4.0.x] Added stub release notes and release date for 4.0.4, 3.2.13, and 2.2.28.

5137416 [4.0.x] Fixed #32129 -- Adjusted the docs for session expiry helpers.

7d540d6 [4.0.x] Fixed #33598 -- Reverted "Removed unnecessary reuse_with_filtered_rel...

f62816b [4.0.x] Updated Oracle docs links to Oracle 21c.

0da9053 [4.0.x] Updated various links to HTTPS and new locations.

7f69c0d [4.0.x] Corrected models.FileField signature in docs.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django from 4.0 to 4.0.2
Bumps django from 4.0 to 4.0.2.

Commits

b12be7a [4.0.x] Bumped version for 4.0.2 release.

f9c7d48 [4.0.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.

0142204 [4.0.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.

6928227 [4.0.x] Fixed #33480 -- Fixed makemigrations crash when renaming field of ren...

aff79be [4.0.x] Fixed #33468 -- Fixed QuerySet.aggregate() after annotate() crash on ...

7a1c653 [4.0.x] Updated translations from Transifex.

9a9c5b4 [4.0.x] Fixed #33459 -- Clarified index type in full text search docs.

7c2d4d9 [4.0.x] Fixed #33462 -- Fixed migration crash when altering type of primary k...

f4de870 [4.0.x] Fixed #33048 -- Doc'd that DEBUG static files requests don't use midd...

f82ca84 [4.0.x] Fixed #33407 -- Fixed .radiolist admin CSS.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0

Releases(v1.0.0)

v1.0.0(Dec 23, 2021)
🚩 CTF Leaderboard

The goal of this project is to provide a simple web page to allow the participants of an CTF to enter their found flags. Also the live overview over all found flags gives a more competitive feeling to the game.

This app is written using Python 3 and the Django web framework.

Features

Participants can submit flags found during the CTF challenge

Live reload on the leaderboard overview

Simple administration through the Django admin UI

Custom landing page through the Content-model in the DB for instructions, links and screenshots

Source code(tar.gz)
Source code(zip)

Owner

Maurice Bauer

Student of Applied Computer Science at the Corporate State University Baden Württemberg

GitHub Repository

Django Fett is an incomplete code generator used on several projects

Django Fett Django Fett is an incomplete code generator used on several projects. This is an attempt to clean it up and make it public for consumption

6 Dec 31, 2021

Resolve form field arguments dynamically when a form is instantiated

django-forms-dynamic Resolve form field arguments dynamically when a form is instantiated, not when it's declared. Tested against Django 2.2, 3.2 and

108 Jan 03, 2023

Comparing Database performance with Django ORM

Comparing Database performance with Django ORM Postgresql MySQL MariaDB SQLite Comparing database operation performance using django ORM. PostgreSQL v

21 Nov 14, 2022

Django REST Client API

Django REST Client API Client data provider API.

1 Nov 08, 2021

Django Persistent Filters is a Python package which provide a django middleware that take care to persist the querystring in the browser cookies.

Django Persistent Filters Django Persistent Filters is a Python package which provide a django middleware that take care to persist the querystring in

2 Aug 05, 2022

Utility for working with recurring dates in Django.

django-recurrence django-recurrence is a utility for working with recurring dates in Django. Documentation is available at https://django-recurrence.r

408 Jan 06, 2023

APIs for a Chat app. Written with Django Rest framework and Django channels.

ChatAPI APIs for a Chat app. Written with Django Rest framework and Django channels. The documentation for the http end points can be found here This

18 Sep 09, 2022

A standalone package to scrape financial data from listed Vietnamese companies via Vietstock

Scrape Financial Data of Vietnamese Listed Companies - Version 2 A standalone package to scrape financial data from listed Vietnamese companies via Vi

45 Nov 16, 2022

Yummy Django API, it's the exclusive API used for the e-yummy-ke vue web app

1 Feb 14, 2022

A Django application that provides country choices for use with forms, flag icons static files, and a country field for models.

Django Countries A Django application that provides country choices for use with forms, flag icons static files, and a country field for models. Insta

1.2k Dec 31, 2022

A middleware to log the requests and responses using loguru.

Django Loguru The extension was based on another one and added some extra flavours. One of the biggest problems with the apps is the logging and that

9 Oct 11, 2022

This is a repository for collecting global custom management extensions for the Django Framework.

Django Extensions Django Extensions is a collection of custom extensions for the Django Framework. Getting Started The easiest way to figure out what

6k Dec 26, 2022

Django URL Shortener is a Django app to to include URL Shortening feature in your Django Project

Django URL Shortener Django URL Shortener is a Django app to to include URL Shortening feature in your Django Project Install this package to your Dja

4 Nov 18, 2021

A Blog Management System Built with django

Blog Management System Backend use: Django Features Enhanced Ui

1 Dec 06, 2021

:couple: Multi-user accounts for Django projects

django-organizations Summary Groups and multi-user account management Author Ben Lopatin (http://benlopatin.com / https://wellfire.co) Status Separate

1.1k Jan 01, 2023

REST API with Django and SQLite3

1 Nov 07, 2021

A beginner django project and also my first Django project which involves shortening of a longer URL into a short one using a unique id.

Django-URL-Shortener A beginner django project and also my first Django project which involves shortening of a longer URL into a short one using a uni

3 Aug 08, 2021

A CTF leaderboard for the submission of flags during a CTF challenge. Built using Django.

Related tags

Overview

🚩 CTF Leaderboard

Features

Getting started

Feature ideas

Comments

Bump django from 4.0.7 to 4.0.8

Bump django from 4.0.6 to 4.0.7

Bump django from 4.0.4 to 4.0.6

Bump django from 4.0.2 to 4.0.4

Bump django from 4.0 to 4.0.2

Releases(v1.0.0)

v1.0.0(Dec 23, 2021)

🚩 CTF Leaderboard

Features

Owner

Maurice Bauer

Django Fett is an incomplete code generator used on several projects

Resolve form field arguments dynamically when a form is instantiated

Comparing Database performance with Django ORM

Django REST Client API

Django Persistent Filters is a Python package which provide a django middleware that take care to persist the querystring in the browser cookies.

Utility for working with recurring dates in Django.

APIs for a Chat app. Written with Django Rest framework and Django channels.

A standalone package to scrape financial data from listed Vietnamese companies via Vietstock

Yummy Django API, it's the exclusive API used for the e-yummy-ke vue web app

A Django application that provides country choices for use with forms, flag icons static files, and a country field for models.

A middleware to log the requests and responses using loguru.

This is a repository for collecting global custom management extensions for the Django Framework.

Django URL Shortener is a Django app to to include URL Shortening feature in your Django Project

A Blog Management System Built with django

:couple: Multi-user accounts for Django projects

REST API with Django and SQLite3

A beginner django project and also my first Django project which involves shortening of a longer URL into a short one using a unique id.

A ToDO Rest API using Django, PostgreSQL and Docker

Django app for building dashboards using raw SQL queries

A pluggable Django application for integrating PayPal Payments Standard or Payments Pro