๐Ÿš€ Submit a Challenge โ€” SecDim AppSec Village CTF at DEF CON 34 and Win a ROG Xbox Ally

Recap - What's New

News3 min read

Here is what we delivered in the last 4 months, our latest features, challenges, improvements, events, workshops and presentations. Enjoy!

New Challenges :video_game:

Platform

May

  • Add individual user statistics for each company user in the Play company dashboard; challenges assigned, challenges started, average challenge attempts, average engagement, and time spent learning
  • Add company user role management; Admin, Manager, and Department Lead
    • Admin role has full access to remove company users, assign user departments, and create and remove departments
    • Manager role has access to assign user departments, and create and remove departments
    • Department Lead role can assign/un-assign users from their department only
  • Create company dashboard in ID to manage users and departments
  • Add ability to generate invite link to add new users to your company
  • Migrate the company user management functionality from Play to this new dashboard in ID
  • Update Play to endpoints to be accessible by User API key on top of the currently logged in user
  • Improve custom game management endpoints to make it easier to call by API call
  • Improve vulnerability search filtering options by API call
  • Optimise vulnerability search endpoint performance

June

  • Update Play company dashboard
    • Update monthly engagment chart to show grade over time
    • Improve company dashboard performance by introducing caching and optimising queries
    • Add chart for completed challenges per vulnerability
    • Apply department filtering for additional charts and cards
  • Update ID company dashboard
    • Move Department table to separate page
  • Fix Stripe subscription check
  • Remove abiliity to stop challenge for event mode
  • Reduce duplicate API calls to improve performance
  • Fix issue when retrieve test status

July

  • Refactor test suite
  • Update URL routes for ID and Play Company Dashboards
  • Fix login error when attempting to login from Play
  • Implement API key access for company API endpoints
  • Add OpenAPI schema support for selected API endpoints
  • Update company dashboard to manage assigned API keys
  • Implement NoCDE tag to disable CDE access for specific challenges
  • Create modal to submit new challenges
  • Hide Hacker Lobby for users who have not logged in
  • Fix silent login flow for Learn platform

August

  • Implement check to remove player from Hacker Lobby if they push a commit to their app once it has been published
  • Revert changes for retrieve public status endpoint that is used in the make status command

Announcements

Blog

Events

  • CodeEurope (Warsaw)
  • Tech Camp (Hamburg)
  • ADEO DevSummit (Lille)
  • BlackHat USA 2025
  • Fix the flag @ AppSec Village (DEF CON)

Past events

Questions or comments? Discuss this post on SecDim Community โ†’

Try it yourself

Find, Hack and Fix Your First Vulnerability

Reading about security bugs is one thing โ€” fixing one is how the skill sticks. Play a free challenge from the wargame, no setup required.