For MMU Students · Learn by Hacking

Capture The Flag.
Level up your cyber skills.

HackTheMMU is a team-based Capture-The-Flag game. Crack real cybersecurity puzzles across web, crypto, forensics, OSINT and more, capture hidden flags, and race up the live leaderboard with your team.

Scroll
21
Challenges
7
Categories
3
Difficulty Tiers
4
Players per Team
Discover both sides of the HackTheMMU experience

STUDENT VIEW · Screenshots from the platform

HackTheMMU dashboard showing level, XP and category progress HackTheMMU challenge room with clickable hotspots HackTheMMU leaderboard with hall of fame and live activity HackTheMMU team page with roles and member contribution HackTheMMU profile page with achievements and live feed Daily check-in rewards and first-cycle avatar frames
Getting started
Your first capture starts here.

Four steps into the learning space. Go at your own pace.

01

Register & verify

Create your student account with your MMU email and complete email verification.

YOUR IDENTITY
02

Join your class

Use the class code shared by your lecturer to enter your learning space.

YOUR CLASSROOM
03

Team up

Create or join a team of up to 4. Check your teammates, then press Start to lock your team for this room.

YOUR TEAM
04

Find your first flag

Explore a challenge, follow the clues and submit your flag. Learn from each attempt.

YOUR FIRST CAPTURE
The challenges
Seven categories to master

A broad taste of offensive and defensive security for beginners and pros alike.

category_select.sys
Web / Network
Inspect web apps & traffic
What to expect
Cryptography
Break codes & ciphers
What to expect
Forensics
Recover hidden evidence
What to expect
Steganography
Find data in media
What to expect
OSINT / Recon
Track digital footprints
What to expect
Reverse Engineering
Inspect & analyse programs
What to expect
AI Challenge
Restore MIMI's memory
What to expect
HackTheMMUDEVELOPER PASSMMU · FINAL YEAR PROJECT
BS
Yeap Boon Shen
Final Year Student
Multimedia University (MMU)
Ex-Web Dev Intern @ Cyber Village
Drag the pass. Meet the developer.
About the FYP

Built at MMU.
Made for hands-on learning.

A student-built Capture-The-Flag platform that turns cybersecurity concepts into challenges you can explore, solve and learn from.

01

The idea

Proposed by my FYP supervisor, Dr. Pang Ying Han, with a clear goal: make cybersecurity learning more practical and engaging for students.

02

The build

I developed HackTheMMU as my Final Year Project at Multimedia University, bringing challenges, team play and progress tracking into one platform.

03

The experience

Students investigate challenges and learn with teammates. Lecturers configure activities and review participation. There is room to try, fail, solve and improve.

21 scored CTF challenges
Team-based gameplay
Lecturer dashboard
Questions
Frequently asked questions
Who can play HackTheMMU?

Any current MMU student with a valid MMU email. Just register with your username, email, and a password. No class code needed at sign-up. You pick your class on the Classes page afterwards.

Do I need to be an expert hacker?

Not at all! Challenges are split into Easy, Medium and Hard tiers, and there's an unscored Practice Lab plus in-game hints. CTF is one of the best ways to learn security from scratch.

Do I have to be in a team?

Teams (up to 4) are the heart of the game, and a one-person team is allowed. Arrange members before Start: afterwards that room permanently keeps the same roster, even when it closes or reopens. Other rooms use separate teams. Every team stays within one class so lecturer results and room progress remain accurate.

What is a "flag"?

A flag is the secret answer hidden inside each challenge, always in the format MMU2027{some_text_here}. Find it and submit it to capture the challenge for your team. Purchased hints reduce the awarded score.

How are points, XP and Hint Credits calculated?

Score and learning XP are separate. Easy, Medium and Hard challenges give 100/250/500 leaderboard points and 300/600/900 permanent XP. Each room starts you with 300 personal Hint Credits. Daily check-in adds Bonus Credits that work across rooms; hints cost 10/20/30 Credits and trim the challenge's Score Points by 10/15/20% (cumulative, up to 45%) when you solve it — XP and Level are always unaffected.

What if I get stuck on a challenge?

You can use hints, discuss ideas with your team, and come back later. The platform is designed for learning, so the goal is not only to get the answer, but to understand how you got there.

Can lecturers track student progress?

Yes. Lecturers have a dashboard to view class activity, challenge submissions, student engagement, scores, and team progress, making it easier to spot who is active and who may need support.

How is this different from a normal quiz?

Instead of choosing answers from a list, students investigate files, clues, code, network traces, and hidden data. It turns cybersecurity practice into an interactive problem-solving experience.

Is it safe and legal?

Yes. Everything happens inside the game's own safe environment. You only attack the challenges provided. The skills you learn are meant for ethical, legal use only.

Start playing
Ready to capture your first flag?

A student-built cybersecurity learning platform, proposed and guided as a Multimedia University Final Year Project.

Login / Sign Up
FYP by Yeap Boon Shen Supervised by Dr. Pang Ying Han Multimedia University