>_ Root the Box

Root the Box is a real-time capture the flag (CTF) scoring engine for computer wargames where hackers can practice and learn. The application can be easily configured and modified for any CTF style game. The platform allows you to engage novice and experienced players alike by combining a fun game-like environment with realistic challenges that convey knowledge applicable to the real-world, such as penetration testing, incident response, digital forensics and threat hunting.

Like traditional CTF games, each team or player can target challenges of varying difficulty and sophistication, attempting to collect flags. But Root the Box brings additional options to the game. It has built-in support for "botnets", allowing players to upload a small bot program to target machines that grant periodic rewards for each bot in the botnet. You have the option to use a banking system, where (in-game) money can be used instead of points to unlock new levels, buy hints to flags, download a target's source code, or even "SWAT" other players. Password hashes for player bank accounts can also be publicly displayed, allowing competitors to crack them and steal each other's money.

Screenshots & Demo

Additional platform screenshots and game examples.

RootTheBox Demo – Note it may take a few seconds to wake up. Also, please don't change passwords on the example accounts, but feel free to register a new user.

Admin Username admin Password rootthebox
Player Username player Password rootthebox

Features

Team Play or Individual Play
Real-time animated scoreboard, graphs, and status updates using websockets
Flag Types: Static, Regex, Datetime, Multiple Choice, File - w/options for case sensitivity
Options for Penalties, Hints, Attempts, Level Bonuses, Dynamic Scoring, Categories and more
Built-in team based file/text sharing and Admin game material distirbution
Chat support with Rocket Chat integration
CTF Time compatible JSON scoreboard feed
Supports OWASP Juice Shop CTF export
Freeze scoreboard at a specific time allowing for end game countdown
Optional Story Mode - Supports intro dialog, capture Flag or Section dialog w/graphics
Optional in-game Botnets or wall of sheep displaying cracked passwords
Unlocks and upgrades as users capture flags
Export and share Boxes/Flags
Multiple Language Support
Site Themes and other cool stuff

Setup

See the Root the Box Wiki

Platform Requirements

Python 2.7.x or <= 3.8.x, PyPy or Docker. (Note: Python 3.9 breaks thigns as it removes Py2/3 compatibility.)
Install scripts are for Ubuntu >= 18.04 (or Debian) but the application should work on any recent Linux, BSD, or OSX system.

Questions? Problems? Feature Requests?

Create an issue on GitHub if you have any questions, problems or feature requests. We're happy to help you out with setup/configuration/edits and we're always brainstorming new ideas and looking for cool stuff to add!

Contributing

We welcome code contributions, please see our contributing guidelines on the wiki for more information.