Capture The Flag (CTF) challenges are a widely used mechanism for hands-on cybersecurity training, but creating, deploying, and assessing custom challenges remains complex and time-consuming. Existing platforms often rely on static challenge repositories, heavyweight infrastructure, or problems for which solutions have been publicly shared, limiting their suitability for scalable instruction and formal assessment. I present ATHENA CTF, an open source modular framework for the rapid creation, containerization, and deployment of web-based CTF challenges. ATHENA CTF enables challenge authors with modest programming experience to implement fully functional levels in as few as three lines of code, while providing a framework-wide standardized execution environment through containerization. The framework supports per-user and per-team solution parametrization, reducing answer sharing and enabling assessment-ready deployments alongside static configurations for demonstrations and collaborative exercises. ATHENA CTF optionally integrates a centralized database to support learner tracking, LMS-based user provisioning, and automated export of results. To assist learners without disclosing full solutions, the framework includes optional, context-constrained, large language model (LLM)- assisted hints generated from limited interaction history and a creator-authored solution process. This design balances instructional support with safeguards against solution leakage and misuse. Together, these features allow instructors and organizations to rapidly prototype, distribute, and assess CTF challenges while maintaining control over deployment, security, and learner interaction.
Keywords: Capture-the-flag, CTF, cybersecurity, education, modular, framework