Difficulty: "Novice"
A FREE and OPEN SOURCE web-based CTF (Capture The Flag) challenge inspired by the S.T.A.L.K.E.R. game series atmosphere. This project is a fan creation and is not affiliated with or endorsed by GSC Game World or the official S.T.A.L.K.E.R. team.
Welcome to the Zone, stalker! This web challenge will test your basic web security skills in a S.T.A.L.K.E.R.-themed environment. As a rookie stalker, you've just arrived at the Cordon. Sidorovich, the local trader, has a special task for you - find hidden flags across different locations and exchange them for valuable equipment. Available in two languages - English and Ukrainian, out of the box!
- 9 unique locations with different web security challenges
- Dual language support (English/Ukrainian)
- Atmospheric S.T.A.L.K.E.R. interface
- Progressive difficulty curve
- Various web security concepts
- SQL
- XSS
- Cookie manipulation
- Traffic analysis
- Cryptography basics
- Header inspection
- Request parameter tampering
- Docker
- Docker Compose
- Clone the repository:
git clone https://github.com/Morronel/stalker_novice.git
cd stalker-novice- Build and run the container:
sudo docker compose up- Access the challenge at:
http://127.0.0.1:5000
Each location contains a flag in the format STALKER{flag_text}. Exchange these flags with Sidorovich for equipment!
The project is built with:
- Flask (Python web framework)
- Flask-Babel (internationalization)
- SQLite (database)
- Docker (containerization)
This project is released under the MIT License. See the LICENSE file for details.
This is a fan-made CTF challenge inspired by the S.T.A.L.K.E.R. series. All S.T.A.L.K.E.R.-related trademarks and copyrights are property of their respective owners. This project is created for educational purposes only.
Feel free to submit issues and fork the repository. Thanks to Bogdan Shchogolev for testing the challenge and providing feedback.
- Flags auto-submit after encountering them in the challenge.
Good hunting, stalker!
