CTF-mode

As a security class lecturer I want to be able to run Juice Shop in CTF-mode so that my students can compete for solving the most challenges fastest

Architecture Requirements

• Decouple Challenges table from shop data model not needed, see ideas below
• Add a CTF-server to manage all students and track their progress (this must actually be securely implemented)
• Ensure recoverability of user sessions after individual Juice Shop instance crashed continue codes offer that already
• Change single-user variant to also run as CTF-server + single Juice Shop instance (to harvest the recoverability benefits also for single users) not needed, separate project for juice-shop-ctf-server instead

[bkimminich]

Just tried it, and the CTFd setup works. Even on my Windows machine (as long as you remember to forward ports in VirtualBox…) - So, huge thanks again, @tghosth!

(Closing this issue as the feature is technically implemented. I added a Coming soon… section for the FBCTF setup in https://github.com/bkimminich/juice-shop-ctf/blob/master/README.md)

[bkimminich]

The FB variant is ongoing. Commits will come in a few weeks, I hope. The idea there was to have a Docker-cluster of CTF-server, load balancer and several Juice Shop instances. Having an alternative setup with the CTFd - which already comes with it’s own docker-compose file - why not? But even just a distinct config file plus instructions how to use it with Juice Shop would be great!

Displaying a challenge solution code would be required for both variants, so I’ll open a separate issue for that subtask. I can implement this pretty quickly, I suppose.