Teaching · Security
CTF for the classroom
A ready-to-run Capture the Flag game for teaching security in the classroom. I built it for an educational intervention project that brings security didactics to the last year of Spanish upper-secondary school (2º de Bachillerato).
How it works
Students connect through the browser to a Linux server prepared with challenges, and submit the flags they find to a scoreboard. The server has several users, each one a level with its own challenges.
- Wetty provides an SSH console in the web page, so students need nothing installed.
- Root the Box is the game platform: scoreboard, flags and challenge management.
- A Linux machine included in the repository holds the challenges, with a README listing the users and what is practised at each level.
- The game content ships as a backup file that can be imported into Root the Box.
Run it
- Fetch the two submodules, Wetty and Root the Box, with
git submodule update --init. - Start everything with
docker compose up. - Create an administrator account in Root the Box and import the game backup (Backup/Restore, Import XML).
Good to know
The environment is designed to run inside the school network, so it deliberately skips extra protection such as TLS certificates. Do not expose it to the Internet as it is. The documentation in the repository is written in Spanish.