本仓库基于 CTFd 3.8.7，并新增了三个公共组件：
一个面向 CTFd 的事务性解题提交发件箱（outbox）。
一个用 Rust 编写的赛事账本服务。
一个仅参赛者可用的 MCP 服务，暴露 ctf_list_challenges、ctf_get_challenge、ctf_get_scoreboard 和ctf_submit_flag。
工作人员和管理操作不在参赛者 MCP 服务范围内。下面是 CTFd 原始 README。
CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes.
Related MCP server: mcp-ctftime
Create your own challenges、categories、hints、and flags from the Admin Interface
Dynamic Scoring Challenges
Unlockable challenge support
Challenge plugin architecture to create your own custom challenges
Static & Regex based flags
Custom flag plugins
Unlockable hints
File uploads to the server or an Amazon S3-compatible backend
Limit challenge attempts & hide challenges
Automatic bruteforce protection
Individual and Team based competitions
Have users play on their own or form teams to play together with each other
Scoreboard with automatic tie resolution
Hide Scores from the public
Freeze Scores at a specific time
Scoregraphs comparing the top 10 teams and team progress graphs
Markdown content management system
SMTP + Mailgun email support
Email confirmation support
Forgot password support
Automatic competition starting and ending
Team management, hiding, and banning
Importing and Exporting of CTF data for archival
And a lot more ...
Install dependencies: pip install -r requirements.txt
You can also use the prepare.sh script to install system dependencies using apt.
Modify CTFd/config.ini to your liking.
Use python serve.py or flask run in a terminal to drop into debug mode.
You can use the auto-generated Docker images with the following command:
docker run -p 8000:8000 -it ctfd/ctfd
Or you can use Docker Compose with the following command from the source repository:
docker compose up
Check out the CTFd docs for deployment options and the Getting Started guide
To get basic support, you can join the MajorLeagueCyber Community:
If you prefer commercial support or have a special project, feel free to contact us.
Looking to use CTFd but don't want to deal with managing infrastructure? Check out the CTFd website for managed CTFd deployments.
CTFd is heavily integrated with MajorLeagueCyber. MajorLeagueCyber (MLC) is a CTF stats tracker that provides event scheduling, team tracking, and single sign on for events.
By registering your CTF event with MajorLeagueCyber users can automatically login, track their individual and team scores, submit writeups, and get notifications of important events.
To integrate with MajorLeagueCyber, simply register an account, create an event, and install the client ID and client secret in the relevant portion of CTFd/config.py or in the admin panel:
OAUTH_CLIENT_ID = None
OAUTH_CLIENT_SECRET = NoneLogo by Laura Barbera
Theme by Christopher Thompson
Notification Sound by Terrence Martin
This server cannot be deployed
Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
Read-only MCP for AI usage profiles, leaderboards, stats, and docs; no writes or private data.
Public read-only discovery of agent, model, training, task, and verification opportunities.
Read-only discovery of Framekeep capabilities, security boundaries, and public resources.
