tbcsec
.io
index
about
projects
blog
writeups
Transmissions
2026-08-07
Threat Modelling a Room Full of Attackers: Securing a CTF Platform
A red teamer's first attempt at building a formal threat model, applied to Flagpost — an open-source CTF platform whose entire userbase is skilled, motivated attackers — reframing the platform as the vault holding every flag and walking through how STRIDE, kill chains, and MITRE ATT&CK surfaced the threats that matter and the ones worth living with.