Problem

The university project needed a single environment where students could study security topics and apply them through managed CTF challenges.

Implementation

The platform combines authentication, training content, team management, scoring, and publishing workflows. I focused on the CTF module and its challenge lifecycle.

  • Challenge listing and detail flows
  • Flag submission and scoring
  • Administrative challenge management
  • Duplicate solve protection

Key technical decisions

  • Kept challenge, solve, and score responsibilities distinct
  • Validated submissions before score updates
  • Added administration paths for challenge maintenance

Security considerations

  • Protected solve records against accidental duplicate credit
  • Kept challenge administration behind authenticated role checks
  • Avoided exposing stored flags in challenge views