Xsploit CTF
Full-stack CTF platform with in-browser sandboxed terminals per challenge.Full-stack CTF competition platform. Each challenge ships with its own in-browser sandboxed terminal, spawned on demand as an isolated Docker container and streamed over WebSocket to xterm.js. Supports teams or solo play, six challenge categories, leaderboards, and a staff admin panel.
- ▸ Per-challenge sandboxed terminals — disposable Docker containers streamed to xterm.js over WebSocket.
- ▸ Django Channels + Daphne backing a Next.js 16 frontend, deployed across Vercel, Render, and Neon.
- ▸ Locked-down sandboxes: --network none, capped memory/CPU, PID limit, and an idle watchdog.