An analytic system reporting most commonly discussed topics and those areas...not covered as much

Defcon has a list of their presentations up on their media server. Let's get to data gathering. Build a crawler and scrapper to get the titles for presentations

https://media.defcon.org/

How do we want to organize it and store it?

Create a script to autodeploy AWS instances with hashcat for password cracking

In order to effciently fuzz a target application, fuzzing should be parallelized across many running instances. FOE2 is an excellent standalone file fuzzing framework, but it contains no code to easily distribute fuzzing jobs. This is quite a difficult infrastructure problem to solve.

Some ideas have come to mind regarding virtualization choices. Personally, Xen seems like a create choice as it's an easy addition to the Linux kernel and lives in an environment we all know and love.

References:
http://blogs.adobe.com/security/2012/05/a-basic-distributed-fuzzing-framework-for-foe.html
http://www.singlehop.com/blog/hacking-scada-and-ics-part-2/
https://www.coseinc.com/en/index.php?rt=download&act=publication&file=A%20New%20Fuzzing%20Framework.pptx
https://www.blackhat.com/presentations/bh-usa-07/Amini_and_Portnoy/Whitepaper/bh-usa-07-amini_and_portnoy-WP.pdf
https://code.google.com/p/dfuzz/wiki/FuzzingTools

Need a quick way to spin up vulnerable sites and apps based on certain configurations

Can use any resource. Some good ones include:

• http://guides.rubyonrails.org/generators.html
• http://yeoman.io/authoring/

Make vulnerable websites or jails:

• http://ctfcrew.org/writeup/62

We want to start tracking involvement at CTF practices and eventually track participation in real ctf's. How should we design a system that can keep track of things beyond just flag submission? Should we start with just that?

This can be written in any webframework: Django, Rails, etc. You can use angular, bootstrap or whatever frontend you want. Personally, I think angular helps with simple data manipulation.

https://angularjs.org/

Check Milestones, we need to collect data for this, and get the site setup so there are multiple components to the project.

https://github.com/HackUCF/research/milestones

Write proof of concepts for old CVEs

https://web.nvd.nist.gov/view/vuln/search

example: http://blog.includesecurity.com/2014/06/exploit-walkthrough-cve-2014-0196-pty-kernel-race-condition.html