Build 4-VM Intermediate CTF Lab
Budget: $100 – $150 USD
I am looking for an experienced CTF/lab developer to create a complete, professional Capture the Flag (CTF) training lab. The lab should be delivered as four ready-to-use VirtualBox machines (OVA files) with full documentation and support.
The goal is to provide a realistic training environment with multiple vulnerable services, a preconfigured CTFd instance, and an attacker VM for exploitation challenges.
Scope of Work
VM1 – CTFd (Challenge Platform)
Preconfigured CTFd instance with all challenges, flags, and hints already loaded.
Challenges categorized by type (Web / Local / Priv-esc) and difficulty (Easy/Medium/Hard).
Flags registered in CTFd with points, categories, and 3 hints each.
VM2 – Webserver A
Realistic company-style web portal (e.g., corporate site, customer portal).
Includes defined vulnerabilities and hidden flags.
Professional layout, realistic text/content (no lorem ipsum).
VM3 – Webserver B
Another realistic service (e.g., intranet, blog, support portal).
Unique vulnerabilities and flags, not just duplicates of VM2.
Believable corporate/crypto/security-related theme.
VM4 – Exploitation Machine (Attacker VM)
Configured attacker workstation with relevant tools.
Contains application-level and privilege escalation challenges.
Designed for realistic exploitation without including harmful/malicious code.
Deliverables
Four OVA files (VM1–VM4), tested and ready for VirtualBox import.
Step-by-step deployment guide (how to boot and configure each VM).
Admin documentation (writeups) including:
Challenge name, type, difficulty, and points.
Exact flag location (file path, DB field, variable, etc.).
One working method to retrieve each flag.
Three hints per challenge (graded, configured in CTFd to reduce points).
Export/backup of CTFd with all challenges, flags, and hints.
Reset instructions (snapshot guide or reset scripts).
Test & acceptance checklist.
7 days of technical support after delivery to verify and fix issues.
Acceptance Criteria
All four OVAs import and boot correctly in VirtualBox.
CTFd (VM1) is preloaded with all challenges, flags, hints, and scoring system.
Both webservers (VM2 & VM3) look professional, with realistic content and logos (provided by me).
Each challenge has clear documentation for the organizer (flag location + one solution path).
Hints are preconfigured and reduce points when used.
No branding or references to the freelancer inside the lab.
All requirements are confirmed in the test checklist.
Terms
Ownership: All deliverables belong exclusively to the client (myself). The freelancer may not reuse, resell, or redistribute them.
Security/Ethics: No harmful or malicious code. The lab must be safe for controlled training use.
What to Include in Your Proposal
Please reply with:
Your relevant experience with CTFs, lab development, VirtualBox, or vulnerable web applications.
Examples (screenshots, GitHub links, or portfolio) of similar projects.
Your estimated timeline for delivery.
Confirmation that you can deliver all requirements listed above.
Note: Proposals that include “solutions” or exploit code will not be accepted. I only require the lab design, VM files, and organizer documentation.
Our budget 150$
Thanks
The goal is to provide a realistic training environment with multiple vulnerable services, a preconfigured CTFd instance, and an attacker VM for exploitation challenges.
Scope of Work
VM1 – CTFd (Challenge Platform)
Preconfigured CTFd instance with all challenges, flags, and hints already loaded.
Challenges categorized by type (Web / Local / Priv-esc) and difficulty (Easy/Medium/Hard).
Flags registered in CTFd with points, categories, and 3 hints each.
VM2 – Webserver A
Realistic company-style web portal (e.g., corporate site, customer portal).
Includes defined vulnerabilities and hidden flags.
Professional layout, realistic text/content (no lorem ipsum).
VM3 – Webserver B
Another realistic service (e.g., intranet, blog, support portal).
Unique vulnerabilities and flags, not just duplicates of VM2.
Believable corporate/crypto/security-related theme.
VM4 – Exploitation Machine (Attacker VM)
Configured attacker workstation with relevant tools.
Contains application-level and privilege escalation challenges.
Designed for realistic exploitation without including harmful/malicious code.
Deliverables
Four OVA files (VM1–VM4), tested and ready for VirtualBox import.
Step-by-step deployment guide (how to boot and configure each VM).
Admin documentation (writeups) including:
Challenge name, type, difficulty, and points.
Exact flag location (file path, DB field, variable, etc.).
One working method to retrieve each flag.
Three hints per challenge (graded, configured in CTFd to reduce points).
Export/backup of CTFd with all challenges, flags, and hints.
Reset instructions (snapshot guide or reset scripts).
Test & acceptance checklist.
7 days of technical support after delivery to verify and fix issues.
Acceptance Criteria
All four OVAs import and boot correctly in VirtualBox.
CTFd (VM1) is preloaded with all challenges, flags, hints, and scoring system.
Both webservers (VM2 & VM3) look professional, with realistic content and logos (provided by me).
Each challenge has clear documentation for the organizer (flag location + one solution path).
Hints are preconfigured and reduce points when used.
No branding or references to the freelancer inside the lab.
All requirements are confirmed in the test checklist.
Terms
Ownership: All deliverables belong exclusively to the client (myself). The freelancer may not reuse, resell, or redistribute them.
Security/Ethics: No harmful or malicious code. The lab must be safe for controlled training use.
What to Include in Your Proposal
Please reply with:
Your relevant experience with CTFs, lab development, VirtualBox, or vulnerable web applications.
Examples (screenshots, GitHub links, or portfolio) of similar projects.
Your estimated timeline for delivery.
Confirmation that you can deliver all requirements listed above.
Note: Proposals that include “solutions” or exploit code will not be accepted. I only require the lab design, VM files, and organizer documentation.
Our budget 150$
Thanks