Need help with RootTheBox?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.

About the developer

536 Stars 216 Forks Apache License 2.0 1.3K Commits 43 Opened issues


A Game of Hackers (CTF Scoreboard & Game Manager)

Services available


Need anything else?

Contributors list

>_ Root the Box

Code style:
black Awesome

Root the Box is a real-time capture the flag (CTF) scoring engine for computer wargames where hackers can practice and learn. The application can be easily configured and modified for any CTF style game. The platform allows you to engage novice and experienced players alike by combining a fun game-like environment with realistic challenges that convey knowledge applicable to the real-world, such as penetration testing, incident response, digital forensics and threat hunting.


Like traditional CTF games, each team or player can target challenges of varying difficulty and sophistication, attempting to collect flags. But Root the Box brings additional options to the game. It has built-in support for "botnets", allowing players to upload a small bot program to target machines that grant periodic rewards for each bot in the botnet. You have the option to use a banking system, where (in-game) money can be used instead of points to unlock new levels, buy hints to flags, download a target's source code, or even "SWAT" other players. Password hashes for player bank accounts can also be publicly displayed, allowing competitors to crack them and steal each other's money.

Screenshots & Demo

Additional platform screenshots and game examples.

RootTheBox DemoNote it may take a few seconds to wake up. Also, please don't change passwords on the example accounts, but feel free to register a new user. - Admin Username

- Player Username


  • Team Play or Individual Play
  • Real-time animated scoreboard, graphs, and status updates using websockets
  • Flag Types: Static, Regex, Datetime, Multiple Choice, File - w/options for case sensitivity
  • Options for Penalties, Hints, Attempts, Level Bonuses, Dynamic Scoring, Categories and more
  • Built-in team based file/text sharing and Admin game material distirbution
  • Chat support with Rocket Chat integration
  • CTF Time compatible JSON scoreboard feed
  • Supports OWASP Juice Shop CTF export
  • Freeze scoreboard at a specific time allowing for end game countdown
  • Optional Story Mode - Supports intro dialog, capture Flag or Section dialog w/graphics
  • Optional in-game Botnets or wall of sheep displaying cracked passwords
  • Unlocks and upgrades as users capture flags
  • Export and share Boxes/Flags
  • Multiple Language Support
  • Site Themes and other cool stuff


See the Root the Box Wiki

Platform Requirements

  • Python 2.7.x or <= 3.8.x, PyPy or Docker. (Note: Python 3.9 breaks thigns as it removes Py2/3 compatibility.)
  • Install scripts are for Ubuntu >= 18.04 (or Debian) but the application should work on any recent Linux, BSD, or OSX system.

Questions? Problems? Feature Requests?

Create an issue on GitHub if you have any questions, problems or feature requests. We're happy to help you out with setup/configuration/edits and we're always brainstorming new ideas and looking for cool stuff to add!


We welcome code contributions, please see our contributing guidelines on the wiki for more information.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.