HackTheMMU is a team-based Capture-The-Flag game. Crack real cybersecurity puzzles across web, crypto, forensics, OSINT and more, capture hidden flags, and race up the live leaderboard with your team.
STUDENT VIEW · Screenshots from the platform
LECTURER VIEW · Screenshots from the platform and exported report
Four steps into the learning space. Go at your own pace.
Create your student account with your MMU email and complete email verification.
YOUR IDENTITYUse the class code shared by your lecturer to enter your learning space.
YOUR CLASSROOMCreate or join a team of up to 4. Check your teammates, then press Start to lock your team for this room.
YOUR TEAMExplore a challenge, follow the clues and submit your flag. Learn from each attempt.
YOUR FIRST CAPTUREA broad taste of offensive and defensive security for beginners and pros alike.
A student-built Capture-The-Flag platform that turns cybersecurity concepts into challenges you can explore, solve and learn from.
Proposed by my FYP supervisor, Dr. Pang Ying Han, with a clear goal: make cybersecurity learning more practical and engaging for students.
I developed HackTheMMU as my Final Year Project at Multimedia University, bringing challenges, team play and progress tracking into one platform.
Students investigate challenges and learn with teammates. Lecturers configure activities and review participation. There is room to try, fail, solve and improve.
Any current MMU student with a valid MMU email. Just register with your username, email, and a password. No class code needed at sign-up. You pick your class on the Classes page afterwards.
Not at all! Challenges are split into Easy, Medium and Hard tiers, and there's an unscored Practice Lab plus in-game hints. CTF is one of the best ways to learn security from scratch.
Teams (up to 4) are the heart of the game, and a one-person team is allowed. Arrange members before Start: afterwards that room permanently keeps the same roster, even when it closes or reopens. Other rooms use separate teams. Every team stays within one class so lecturer results and room progress remain accurate.
A flag is the secret answer hidden inside each challenge, always in the format MMU2027{some_text_here}. Find it and submit it to capture the challenge for your team. Purchased hints reduce the awarded score.
Score and learning XP are separate. Easy, Medium and Hard challenges give 100/250/500 leaderboard points and 300/600/900 permanent XP. Each room starts you with 300 personal Hint Credits. Daily check-in adds Bonus Credits that work across rooms; hints cost 10/20/30 Credits and trim the challenge's Score Points by 10/15/20% (cumulative, up to 45%) when you solve it — XP and Level are always unaffected.
You can use hints, discuss ideas with your team, and come back later. The platform is designed for learning, so the goal is not only to get the answer, but to understand how you got there.
Yes. Lecturers have a dashboard to view class activity, challenge submissions, student engagement, scores, and team progress, making it easier to spot who is active and who may need support.
Instead of choosing answers from a list, students investigate files, clues, code, network traces, and hidden data. It turns cybersecurity practice into an interactive problem-solving experience.
Yes. Everything happens inside the game's own safe environment. You only attack the challenges provided. The skills you learn are meant for ethical, legal use only.
A student-built cybersecurity learning platform, proposed and guided as a Multimedia University Final Year Project.
FYP by Yeap Boon Shen
Supervised by Dr. Pang Ying Han
Multimedia University