Five web challenges
Sourcerer, Includer, Uploader, Grabber and Injecter cover source inspection, file inclusion, uploads, HTTP headers and SQL injection.
CLAUSTOCTF CHALLENGE INFRASTRUCTUREv1.0.0
Your challenges.
Your environment.
Build a hands-on CTF environment on your own infrastructure. Manage Docker-backed instances, validate flags and track completions through a REST API.
Five bundled web challenges. Source and deployment docs included.
BUNDLED CHALLENGESFive ways to learn.
Docker isolation01SourcererSource inspection
02IncluderFile inclusion
03UploaderFile uploads
04GrabberHTTP headers
05InjecterSQL injection
Start instances. Validate flags. Award points.Architecture
FROM START TO SOLVE
Give each challenge
a lifecycle.
CLAUSTO is the source-based management layer behind a CTF setup. Connect your own website or learning platform to its API and define how participants reach their challenges.
- 01
Build your challenges
Build the five bundled challenge images from source and configure the Docker network on your Linux host.
- 02
Start participant instances
Use the management API to create and terminate challenge instances, with container isolation and configured resource limits.
- 03
Validate flags and score
Submit discovered flags through the API to record completions and award points. Duplicate solves do not award points twice.
- 04
Maintain the runtime
Use expiry, reconciliation and audit records to keep database state and Docker instances aligned.
INSIDE YOUR DOWNLOAD
The runtime.
The challenges.
The source.
Management API & persistent state
Versioned REST API, flag validation, scoring, audit events and SQLite-backed instance state.
Docker & operations documentation
Challenge build source, isolation policies, tests and guidance for networking, deployment, backup and restore.
BEFORE YOU HOST
Your infrastructure.
A deliberate setup.
Linux, Python & Docker
Use a suitable Linux host, Python 3.11 or newer and Docker Engine. Allow enough memory and storage for concurrent challenge instances and image builds.
Participant networking
Configure the routes and firewall rules participants need. WireGuard is required only when your chosen access route uses it.
Authorized, isolated practice
The included challenges are deliberately vulnerable. Keep them in an isolated training environment and protect the management API. Your participant frontend, hosting and infrastructure operations are separate.
WORKING ON AI MODELS INSTEAD?
Explore NOIFEX.
A separate product for text and image model experiments.