NXAD (NX Attack And Defense) is a Next.js platform for Attack-Defense style cybersecurity competitions. It includes team login, flag submission, scoreboard, chat, passive points, and an admin dashboard.

• Next.js 15
• React 19
• TypeScript
• Tailwind CSS
• MongoDB + Mongoose
• Docker Compose

src/
├── app/
├── components/
├── hooks/
├── lib/
├── models/
└── middleware.ts

scripts/
└── setup-database.js

Root files are kept for framework and tooling configuration only.

Create your local env file:

cp .env.example .env

Set at least these values before setup:

MONGODB_URI=mongodb://localhost:27017/nxad
MONGODB_DATABASE=nxad

ADMIN_USERNAME=admin
ADMIN_PASSWORD=change-me

Do not edit scripts/setup-database.js just to change credentials. Use .env instead.

Install dependencies:

pnpm install

Run MongoDB locally, then initialize the database:

ADMIN_USERNAME=admin ADMIN_PASSWORD=change-me MONGODB_DATABASE=nxad mongosh --file scripts/setup-database.js

Start development server:

pnpm dev

Open http://localhost:3000.

Admin panel: http://localhost:3000/admin/login

Create .env first, then run:

docker compose up -d --build

Stop services:

docker compose down

pnpm build

• Admin Guide
• Attack-Defense Overview
• Challenge And VM Setup Guide
• Simple Container Challenge

• Admin credentials are sourced from .env.
• If the seeded admin password is plaintext, the app hashes it automatically on first successful login.
• Competition scoring defaults are configured in .env.example and can also be changed from the admin config page at runtime.