https://github.com/Nakiami/mellivora

Mellivora is a CTF engine written in PHP
https://github.com/Nakiami/mellivora

Last synced: about 1 month ago
JSON representation

Mellivora is a CTF engine written in PHP

• Host: GitHub
• URL: https://github.com/Nakiami/mellivora
• Owner: Nakiami
• License: gpl-3.0
• Created: 2013-07-15T10:20:07.000Z (over 11 years ago)
• Default Branch: master
• Last Pushed: 2023-12-21T23:27:05.000Z (12 months ago)
• Last Synced: 2024-02-15T11:32:38.265Z (10 months ago)
• Language: PHP
• Homepage:
• Size: 1.61 MB
• Stars: 431
• Watchers: 29
• Forks: 173
• Open Issues: 29
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-ctf-resources - Mellivora - CTF engine written in PHP. (Platforms)

README

        
Mellivora

=========

Mellivora is a CTF engine written in PHP. Want a quick overview? Check out a [screenshot gallery on imgur](https://imgur.com/user/mellivora/posts). Want a quick start? Use [Mellivora with Docker](install/docker/README.md).



  



### Features

- Arbitrary categories and challenges.

- Scoreboard with optional multiple team types.

- Manual or automatic free-text submission marking.

- Challenge hints.

- Team progress page.

- Challenge overview page.

- Limit category and challenge exposure to certain times.

- Challenge reveal on parent challenge solve (by any team).

- Optional signup restrictions based on email regex.

- Local or [Amazon S3](https://aws.amazon.com/s3/) challenge file upload.

- Optional automatic MD5 append to files.

- Admin management console with competition overview.

- Create/edit front page news.

- Arbitrary menu items and internal pages.

- Optional total number and time-based submission throttling.

- User management with IP correlation.

- Internal log for catching exceptions.

- [reCAPTCHA](https://www.google.com/recaptcha/) support.

- User-defined or auto-generated passwords on signup.

- User/Email/IP search.

- Configurable caching.

- Caching proxy (like [Cloudflare](https://www.cloudflare.com/)) aware (optional x-forwarded-for trust).

- Optional separate domain for static files.

- [Segment](https://segment.com/) analytics support.

- SMTP email support. Bulk or single email composition.

- TOTP two factor auth support.

- [CTF Time](https://ctftime.org/) compatible JSON scoreboard.

- Self-serve and admin password reset.

- and more ...

### Scaling

Mellivora scales well on Amazon Elastic Beanstalk and has support for S3 file storage.

### Performance

Mellivora is lightweight. And fast. Very fast. Want to run a large competition on an EC2 micro instance? No problem!? See [benchmarks.md](benchmarks.md) for some possibly unhelpful benchmarks.

### Installation

 * You can find detailed setup instructions in [install/README.md](install/README.md).

 * Run Mellivora easily with docker-compose. See [install/docker/README.md](install/docker/README.md).

### Development

[![Build Status](https://app.travis-ci.com/Nakiami/mellivora.svg?branch=master)](https://app.travis-ci.com/Nakiami/mellivora)

PRs gladly accepted. Test using [Codeception](http://codeception.com/). Read [more about testing here](tests/README.md).

### License

This software is licenced under the [GNU General Public License v3 (GPL-3)](http://www.tldrlegal.com/license/gnu-general-public-license-v3-%28gpl-3%29). The "include/thirdparty/" directory contains third party code. Please read their LICENSE files for information on the software availability and distribution.