CyberKiller - self-hosted King-of-the-Hill hacking arena

WHY TEAMS RUN IT

👑 Automated King of the Hill

Flip any box to KOTH mode and the platform tracks the throne itself. Get root, write your handle to the flag file, hold it. Points tick up live. No koth client to run.

🎯 Any box, in seconds

Add a target by registry reference or upload a docker save tarball. Flags auto-plant, even on images that know nothing about CyberKiller.

🏴 Capture by handle

Prove a capture by writing your hub handle into the flag file. The server reads it and awards you automatically. First blood, kills, live board.

🧡 Real chains

The bundled MERIDIAN scenario is a designed 10-box pivot: breach the DMZ, loot creds, hop inward, root the network.

🔐 Private & yours

Your players, your network, your data. Run it on a laptop, a VPS, or an air-gapped lab.

🚀 One command

./deploy.sh builds everything and prints the hub URL + an invite code. Tear it down or wipe it just as fast.

VS TRYHACKME KOTH

	TryHackMe KOTH	CyberKiller
Hosting	Their cloud	Your box: laptop, VPS, air-gapped lab
Cost	Subscription	Free, AGPL-3.0
Player client	Run their `koth` script	None. Write your handle to the flag file.
Boxes	Fixed set they ship	Any Docker image, by reference or upload
Scenarios	One box at a time	Designed chains (10-box MERIDIAN) + single hills
Privacy	Shared public servers	Private. Your network, your data.

SEE IT LIVE

CyberKiller hub radar showing live target boxes, throne status and the activity ticker — **The hub.** Live radar of every box on the range (tier, points, throne holder) with a real-time activity ticker, leaderboard, and chat.

CyberKiller scoring tab explaining handle-write capture — **Capture by handle.** Get a foothold, write your handle into the flag file, and the platform awards you automatically. No submission box, no instructor.

QUICK START

git clone https://github.com/aaron-kidwell/cyberkiller && cd cyberkiller
./deploy.sh
# prints the hub URL, an admin login, and an invite code.
# targets come up on your LAN

Heads up: CyberKiller deploys deliberately vulnerable systems (real CVEs). Run it only in an isolated lab you control and are authorized to test. Never expose the targets to the internet.