capture the flag — computer security exercise in which "flags" are hidden in purposefully vulnerable programs or websites