OWASP/SecurityShepherd — reverse-engineered prompt

Build me a security training platform like OWASP Security Shepherd.

I want it to be a safe learning app for web and mobile application security, where beginners and experienced people can practice real AppSec and penetration testing exercises. It should have lots of challenge levels that start easy and get harder over time, with plain English explanations for each topic so new users don’t feel lost.

Users should be able to sign up, log in, complete levels, submit solution keys, earn points, and see their progress. Add a scoreboard with medals or bonus points for people who finish challenges early, so it works well for classrooms or CTF style events.

There should also be an admin area where teachers can manage users, create admins, suspend accounts, assign people to class groups, choose which levels are available, switch between open learning, CTF, and tournament style layouts, and review class progress. Include optional feedback after levels, plus useful logging so admins can spot abuse.

Make it easy to run locally with Docker, and look up current docs online if you need to.