Nakiami / mellivora

Mellivora is a CTF engine written in PHP
GNU General Public License v3.0
442 stars 170 forks source link

Mentions on scientific articles or papers #112

Open emaragkos opened 6 years ago

emaragkos commented 6 years ago

Hey there! I am mentioning Mellivora together with a few other CTF platforms as a reference on my thesis with the title "Information Systems Security through Capture The Flag Challenges". Could you please let me know if you are aware of any scientific articles or papers that mention Mellivora or well known competitions that have used it? I have found the following from Scholar but I would like to know if there are more.

1) Chung, K. Lowering the Barriers to Capture The Flag Administration and Participation. 2) Schreuders, Z. C., Shaw, T., Ravichandran, G., Keighley, J., & Ordean, M. (2017, August). Security Scenario Generator (SecGen): A Framework for Generating Randomly Vulnerable Rich-scenario VMs for Learning Computer Security and Hosting CTF Events. In USENIX. USENIX Association.

I have also found a few CTFs that used Mellivora by searching wit the Google dork intext:"Powered by Mellivora" but I would like to know if there were more that run onsite or went down after the event. I am interested mostly on events hosted by Universities and conferences.

https://ctf.cybersecuritychallenge.ro/home https://ctf.radford.edu/home https://junior.stillhackinganyway.nl/home http://198.46.149.204/home https://rhme.riscure.com/3/news https://owasp-ctf.security.cs.pub.ro/home https://trinity.librelabucm.org/home https://ctf.sha2017.org/home

Thanks :)

Nakiami commented 6 years ago

Hi, interesting. I don't really keep track of who has been using Mellivora, other than the occasional search, similar to the one you already did. It's been used by hundreds of competitions. Most of them, as you say, were internal, or have been taken down since. I know bsides used it for a few years http://archive.is/K3d17 (still do by the looks of it: http://www.srnsec.com/blog/ottawa-bsides-ctf-2018-and-building-the-wall-challenges) . It's also used by https://9447.plumbing/ which is a university group.

emaragkos commented 6 years ago

Thanks for your reply :)