The open source Capture The Flag framework for hiring hackers, training developers, and teaching students

Joined April 2016
18 Photos and videos
Pinned Tweet
16 Sep 2025
CTFd 3.8.0 has been released with new analytics and quality-of-life improvements for both admins and participants. Challenge solutions, Challenge Ratings, the new Challenge logic field and other improvements are available in CTFd 3.8.0. Read More: blog.ctfd.io/ctfd-3-8-0/
4
602
Apr 20
CTFd 3.8.4 has been released with fixes for two vulnerabilities. The first allows an attacker to cause malicious links to be served to other users possibly resulting in JS execution. The second is an open redirect for users via malicious crafted URLs. blog.ctfd.io/ctfd-3-8-4/
2
156
Feb 5
CTFd 3.8.2 has been released with a security fix for a vulnerability where a malicious admin user could import a crafted zip file to write files arbitrarily depending on the configuration of CTFd. blog.ctfd.io/ctfd-3-8-2/
2
6
439
20 Feb 2025
CTFd 3.7.6 has been released with security configuration improvement. The TRUSTED_HOSTS config setting has been added to config.ini to restrict CTFd to trusted hostnames. bit.ly/4gSXQNd
2
624
17 Jan 2025
Yesterday we announced new pricing including a change to the edu discount. After discussion with some affected customers, we will be keeping the edu discount at 80% and the non-profit discount at 50% as before. We apologize for any confusion.
3
523
15 Jan 2025
Since our current pricing was established over 7 years ago there have been many changes both in the Hosted CTFd feature set and worldwide economic forces. Our underlying costs have increased across the board and we are updating our pricing. bit.ly/3WjwSaa

1
1
432
14 Oct 2024
CTFd 3.7.4 has been released with a security fix for a vulnerability where an attacker could perform a Denial of Service against a CTFd instance. Read More at bit.ly/4eIFvSL

7
426
2 Aug 2024
CTFd 3.7.3 has been released with a security fix for a vulnerability where an attacker could determine the names of accounts that had solved a challenge even though CTFd was configured to hide account information. bit.ly/3YvAgRc
1
6
620
18 Jun 2024
CTFd 3.7.2 has been released with a security fix for a vulnerability where an attacker could extract flags from CTFd provided that an admin interacted with a malicious page. More details available on our blog bit.ly/3VwAiVv
1
8
610
1 Mar 2024
CTFd 3.7.0 is available now with scoreboard brackets, social sharing links, improvements to the file upload API and the introduction of Vite. Read more at bit.ly/437fmIk

4
640
22 Aug 2023
CTFd v3.6.0 has been released with support for Translations! Initially we are supporting German, Polish, Spanish, and Chinese. This release has been long in the making and we're very relieved to be releasing it out to you! Read more at buff.ly/3QMJzYU

5
1,253
17 Mar 2023
Very excited to be working @osirislab to host a @BSidesNYC CTF in April!
17 Mar 2023
Replying to @ctfdio
@ctfdio @osirislab will host a CTF at @BSidesNYC on April 22. bsidesnyc.org/ CTFd is the best CTF framework for hiring hackers, training devs, and teaching students. ctfd.io/ OSIRIS is a student cybersec research lab/club at NYU. osiris.cyber.nyu.edu/
1,166
24 Jan 2023
Introducing Tourist! We're open sourcing an internal project that makes it easier to run browser-based CTF challenges. Read more on our blog at buff.ly/3wtdkT6.

3
8
1,988
11 May 2022
CTFd v3.5.0 has been released with Next Challenge, Hint Requirements, Importer Improvements, and a beta release of the next iteration of the default CTFd theme! 50% reduction in bundle size! Read more at buff.ly/3PbtU2b

5
8 Mar 2022
CTFd v3.4.3 (and the shortlived 3.4.2) is available now with a security fix in a dependency to resolve CVE-2022-24724. Full changelog at Github buff.ly/3tHXh2h

3
20 Feb 2022
CTFd v3.4.1 is available now with small UI fixes and performance improvements. Full changelog at Github: buff.ly/36qY7IF

1
4
CTFd retweeted
31 Jan 2022
Super easy student friendly #CTF (I'm not involved). Powered by @ctfdio (who I do contract work for). practice.nationalcybercup.or…

1
1
CTFd retweeted
Announcing the 2021 Metasploit community CTF: Registration opens Nov. 22, game play begins Dec. 3. Teams welcome and encouraged as always— thanks to @tryhackme and @ctfdio for supporting this year's game. rapid7.com/blog/post/2021/11…
41
96