Root the Box is a real-time capture the flag (CTF) scoring engine for computer wargames where hackers can practice and learn. The application can be easily configured and modified for any CTF style game. The platform allows you to engage novice and experienced players alike by combining a fun game-like environment with realistic challenges that convey knowledge applicable to the real-world, such as penetration testing, incident response, digital forensics and threat hunting.

Like traditional CTF games, each team or player can target challenges of varying difficulty and sophistication, attempting to collect flags. But Root the Box brings additional options to the game. It has built-in support for "botnets", allowing players to upload a small bot program to target machines that grant periodic rewards for each bot in the botnet. You have the option to use a banking system, where (in-game) money can be used instead of points to unlock new levels, buy hints to flags, download a target's source code, or even "SWAT" other players. Password hashes for player bank accounts can also be publicly displayed, allowing competitors to crack them and steal each other's money.

Additional platform screenshots and game examples.

RootTheBox Demo – Note it may take a few seconds to wake up. Also, please don't change passwords on the example accounts, but feel free to register a new user.

• Admin Username admin Password rootthebox
• Player Username player Password rootthebox

• Team Play or Individual Play
• Real-time animated scoreboard, graphs, and status updates using websockets
• Flag Types: Static, Regex, Datetime, Multiple Choice, File - w/options for case sensitivity
• Options for Penalties, Hints, Attempts, Level Bonuses, Dynamic Scoring, Categories and more
• Built-in team based file/text sharing and Admin game material distirbution
• Chat support with Rocket Chat integration
• CTF Time compatible JSON scoreboard feed
• Supports OWASP Juice Shop CTF export
• Freeze scoreboard at a specific time allowing for end game countdown
• Optional Story Mode - Supports intro dialog, capture Flag or Section dialog w/graphics
• Optional in-game Botnets or wall of sheep displaying cracked passwords
• Unlocks and upgrades as users capture flags
• Export and share Boxes/Flags
• Multiple Language Support
• Site Themes and other cool stuff

See the Root the Box Wiki

• Python 2.7.x or <= 3.8.x, PyPy or Docker. (Note: Python 3.9 breaks thigns as it removes Py2/3 compatibility.)
• Install scripts are for Ubuntu >= 18.04 (or Debian) but the application should work on any recent Linux, BSD, or OSX system.

Create an issue on GitHub if you have any questions, problems or feature requests. We're happy to help you out with setup/configuration/edits and we're always brainstorming new ideas and looking for cool stuff to add!

We welcome code contributions, please see our contributing guidelines on the wiki for more information.