I mean that's kind of what some security CTFs are built this way. They build a working system/application with some flaws, and you find them and break them. Som

I mean that's kind of what some security CTFs are built this way. They build a working system/application with some flaws, and you find them and break them. Sometimes in the more advanced CTFs like NetWars, you have to also fix the flaws and defend against your competitors.