CTFd 3.7.0

CTFd 3.7.0 has been released with the introduction of scoring brackets and the social sharing system. We have also completely removed webpack from CTFd in favor of Vite.

Scoreboard Brackets

The CTFd scoreboard page and API have been updated to allow for the creation of "Brackets". Brackets allow admins to have participants be organized into participation groups for fairer scoring.

Social Links

Particpants can now share their successes in CTFs with their social network. CTFd will now allow users who solve a challenge to share a link and image preview that proves they solved that challenge.

For now the feature is sparse but we have customization and additional features to the social sharing capability planned on our roadmap. Stay tuned!

Upload Improvements

CTFd will now calculate and record the SHA1 hash of any uploaded file. This can be used by API clients to determine if a file needs to be updated. ctfcli has also been updated to support the hash field to reduce unnecessary uploads.

{
    "success": true,
    "data": [
        {
            "sha1sum": null,
            "id": 1,
            "type": "challenge",
            "location": "cute-animals/puppy.zip"
        },
        {
            "sha1sum": null,
            "id": 2,
            "type": "challenge",
            "location": "5bb49e6f5bb44f2eaa4c2e4ee76d685c/statue.jpg"
        }
    ]
}

In addition, CTFd now allows Admins to control the storage location of a file which controls the download URL of the file. This means that Admins can upload files and guarantee its location so that URL can be shared and re-used (even across CTFd exports).

For example, you can upload your event brochure to "/files/important/brochure.pdf" instead of the randomly generated folder name that was used previously.

Goodbye Webpack

CTFd's Admin Panel has been migrated away from webpack to Vite. In addition the Admin Panel now provides Alpine.js for plugins to use to add UI interactivity.

The last remaining vestige of webpack is the deprecated core theme. If you are still on the core theme, we strongly recommend switching to core-beta which will eventually replace core. Not only will you experience better performance, the brackets and social features discussed here are only available on core-beta!

As usual v3.7.0 has already been deployed to Hosted CTFd customers. Self-hosted users can download the latest version of CTFd from Github.