Introducing the Challenge Bank: 27 Ready-to-Use CTF Challenges

Biterra's Challenge Bank is live. We've got 27 challenges you can use straight away-no need to build everything from scratch.

Why We Built This

Running a CTF is already a lot of work. You've got infrastructure to set up, teams to coordinate, and a hundred other things. Spending weeks writing and debugging challenge code shouldn't be one of them. So we did that part: everything in the bank is tested, Dockerised, and comes with exploit scripts and writeups. You pick the challenges you want, import them into your world, and you're done.

If you're comparing options before your next event, the CTF challenge bank page explains how ready-made challenge content fits into Biterra worlds, imports, categories, and custom material.

What's in There?

27 challenges across four areas:

• Web exploitation – XSS, SQL injection, and that kind of thing
• Binary exploitation – stack overflows, heap stuff, format strings
• Reverse engineering – unpacking binaries, pulling apart code
• Cryptography – ciphers, key exchange, crypto puzzles

Every challenge has Docker already set up, exploit scripts and writeups, hints and solutions, and difficulty ratings from Trivial up to Extra Hard. Points are set. You don't have to configure any of that.

Some Highlights

A few we're fond of:

Howl's Moving Heap – Heap exploitation, themed around Howl's Moving Castle. You're messing with Calcifer's control deck; the "rooms" are heap chunks and you're going after a tcache double-free.

Malibu Dreamhouse Popup Payload – Easy web challenge. XSS basics. Barbie's pop-up party board looks innocent until you find the vulnerability.

Grogu Stack Snack – Mandalorian-themed stack overflow for people just getting started. The chef droid's ration printer seems fine until you order more than it can handle. Good intro to buffer overflows.

Derezzed Lightcycle Unpacker – Tron: Legacy themed. Hard reverse engineering: you have to unpack a neon loader and figure out how it works. Multi-stage, so you'll need both static and dynamic analysis.

Night City Format Overdrive – Cyberpunk 2077 format string challenge. Medium difficulty-a solid step up from basic buffer overflows.

When You Need It Fast

The point of the Challenge Bank is simple: you need to run a CTF and you don't have time to build challenges. Maybe it's a last-minute training session, a corporate workshop, a community event, or a course. You can get a competition up in minutes instead of weeks. Browse the bank, pick challenges that match the difficulty you want, import them into your Biterra world. No coding or debugging on your side.

What's Next?

We're adding more challenges over time-more categories, more difficulty levels. We're also open to community submissions: if you've built something you'd like to share, get in touch. The Challenge Bank is available now for everyone on Biterra-check it out and put together your next CTF.