MythEclipse/attack-defense-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docker compose bugfix

Browse Source
This commit is contained in:
rafliher
2025-10-25 14:18:49 +07:00
parent 6ea6f54150
commit 41a170543b
15 changed files with 375 additions and 313 deletions
Download Patch File Download Diff File Expand all files Collapse all files
receiver/challenges/Carbeat.py
+157
View File
@@ -0,0 +1,157 @@
from .Challenge import Challenge
import subprocess
import time
import re
import os
class Carbeat(Challenge):
flag_location = 'flags/carbeat.txt'
history_location = 'history/carbeat.txt'
_CONTAINER = "carbeat_container"
_SERVICE_CMD = ["docker", "exec", "-i", _CONTAINER, "/home/ctf/chall/mybini"]
_HEX_RE = re.compile(r'^[0-9a-fA-F]+$')
def _read_container_flag(self) -> str:
out = subprocess.run(["docker", "exec", self._CONTAINER, "cat", "/flag.txt"],
capture_output=True, text=True)
if out.returncode != 0 or not out.stdout.strip():
raise FileNotFoundError("Flag not found in container (/flag.txt)")
return out.stdout.strip()
def _spawn(self):
return subprocess.Popen(
self._SERVICE_CMD,
stdin=subprocess.PIPE,
stdout=subprocess.PIPE,
stderr=subprocess.STDOUT,
text=True,
bufsize=0,
)
def _read_until(self, proc, token, timeout=5.0, max_bytes=1_000_000):
start = time.time()
buf = []
r = proc.stdout.read
while True:
if time.time() - start > timeout:
tail = ''.join(buf)[-500:]
raise TimeoutError(f"Timeout waiting for '{token}'. Got so far:\n{tail}")
ch = r(1)
if ch == "" and proc.poll() is not None:
raise RuntimeError(f"Process ended while waiting for '{token}'. Output:\n{''.join(buf)}")
buf.append(ch)
if len(buf) > max_bytes:
raise RuntimeError("Exceeded max read size")
if token in "".join(buf):
return "".join(buf)
def _send_line(self, proc, s: str):
proc.stdin.write(s + "\n")
proc.stdin.flush()
def _expect_hex_field(self, text: str, label: str) -> str:
m = re.search(rf"{re.escape(label)}\s*:\s*([0-9a-fA-F]+)", text)
assert m, f"Missing '{label}' in output. Tail:\n{text[-400:]}"
hx = m.group(1)
assert self._HEX_RE.match(hx), f"{label} is not hex"
return hx
def distribute(self, flag):
try:
os.makedirs(os.path.dirname(self.flag_location), exist_ok=True)
with open(self.flag_location, 'w') as f:
f.write(flag)
os.makedirs(os.path.dirname(self.history_location), exist_ok=True)
with open(self.history_location, 'a') as f:
f.write(flag + '\n')
self.logger.info(f'Flag {flag} written to {self.flag_location}')
return True
except Exception as e:
self.logger.error(f'Could not write flag to {self.flag_location}: {e}')
return False
def register(self, proc, name, level, timeout=1.):
self._read_until(proc, "> ", timeout=timeout)
self._send_line(proc, "1")
self._read_until(proc, ": ", timeout=timeout)
self._send_line(proc, name)
self._read_until(proc, ": ", timeout=timeout)
self._send_line(proc, str(level))
def login(self, proc, name, timeout=1.):
self._read_until(proc, "> ", timeout=timeout)
self._send_line(proc, "2")
self._read_until(proc, ": ", timeout=timeout)
self._send_line(proc, name)
def list_user(self, proc, timeout=1.):
self._read_until(proc, "> ", timeout=timeout)
self._send_line(proc, "3")
return self._read_until(proc, "\n1. register")
def bini(self, proc, id, data, timeout=1.0):
self._read_until(proc, "> ", timeout=timeout)
self._send_line(proc, str(id))
self._read_until(proc, ": ", timeout=timeout)
self._send_line(proc, data)
def logout(self, proc, timeout=1.):
self._read_until(proc, "> ", timeout=timeout)
self._send_line(proc, "4")
def exit(self, proc, timeout=1.):
self._read_until(proc, "> ", timeout=timeout)
self._send_line(proc, "3")
def check(self):
try:
with open(self.flag_location, 'r') as f:
host_flag = f.read().strip()
container_flag = self._read_container_flag()
assert host_flag == container_flag, 'Flag mismatch between host and container'
self.logger.info('[ok] flag parity (carbeat)')
proc = self._spawn()
self.register(proc, "karbit", 1337)
name = self.list_user(proc)
assert "karbit" in name
self.login(proc, "karbit")
self.bini(proc, 1, "waguri")
self.bini(proc, 2, "0")
waguri = self._read_until(proc, "0. edit", timeout=1.)
assert "waguri" in waguri
self.bini(proc, 3, "0")
self.logout(proc)
self.exit(proc)
try:
proc.wait(timeout=2.0)
except subprocess.TimeoutExpired:
proc.kill()
raise AssertionError("Program did not exit after option 3")
self.logger.info("[ok] service exit on 3")
proc_alarm = self._spawn()
self._read_until(proc_alarm, "zzz", timeout=190.0) # 180s + slack
try:
proc_alarm.wait(timeout=5.0)
except subprocess.TimeoutExpired:
proc_alarm.kill()
raise AssertionError("Alarm fired but process did not exit")
self.logger.info("[ok] alarm fired ('zzz') and process self-terminated")
self.logger.info('Check passed for carbeat')
return True
except Exception as e:
self.logger.error(f'Could not check carbeat: {e}')
return False
receiver/challenges/Naraka.py
-99
View File
@@ -1,99 +0,0 @@
from .Challenge import Challenge
import io
import requests
import random
import subprocess
import requests
import re
class Naraka(Challenge):
flag_location = 'flags/naraka.txt'
history_location = 'history/naraka.txt'
def distribute(self, flag):
try:
with open(self.flag_location, 'w') as f:
f.write(flag)
with open(self.history_location, 'a') as f:
f.write(flag + '\n')
self.logger.info(f'Flag {flag} written to {self.flag_location}')
return True
except Exception as e:
self.logger.error(f'Could not write flag to {self.flag_location}: {e}')
return False
def check(self):
random_name = [
"nael", "mufat", "rayhan", "wicak", "Kingggg",
"osdie", "udin", "memet", "entong", "krabby",
"mew", "charizard", "pidgey", "rattata", "vulpix",
"eevee", "snorlax", "magikarp", "growlithe", "abra"
]
math_expression = "+-*"
python_programs = [
"a = 10;b = 5;print(a+b)", "a = 'add'; b='string';print(a+b)","x = [1,2,3,4,5,6,7,8];print(max(x))"
]
programs_result = ["b'15","b'addstring","b'8"]
try:
# Step 1: Chekc Greetings return name
name = random.choice(random_name)
url = f'http://localhost:{self.port}/render?name={name}'
r = requests.get(url, timeout=5)
assert name in r.text, 'Greetings is not greetings my name :('
# Step 2: Check eval calculator using random math expression
math = f'{random.randint(1,100)}{random.choice(math_expression)}{random.randint(1,100)}'
math_result = eval(math)
data = {'chall': '2','input':math}
url = f'http://localhost:{self.port}/chall'
r = requests.post(url, data=data, timeout=5)
assert str(math_result) in r.text, 'Eval calculator is not working :('
# Step 3: Check exec that execute python program
ind = random.randint(0,2)
pythononeline = python_programs[ind]
pythonresult = programs_result[ind]
data = {'chall': '1','input':pythononeline}
url = f'http://localhost:{self.port}/chall'
r = requests.post(url, data=data, timeout=5)
assert pythonresult in r.text, 'My code line is not execute :('
# Step 4: Check execute FLAG declaration execute
url = f'http://localhost:{self.port}/sourcecode/1'
r = requests.get(url, timeout=5)
flag_assignments = re.findall(r'^\s*FLAG\s*=\s*sys\.argv\[2\]\s*$', r.text, re.MULTILINE)
flag_assignments_num = flag_assignments = re.findall(r'^\s*FLAG\s*=\s*.+$', r.text, re.MULTILINE)
assert flag_assignments != 1 or flag_assignments_num != 1, "execute FLAG declared incorrectly"
# Step 5: Check evaluate FLAG declaration execute
url = f'http://localhost:{self.port}/sourcecode/1'
r = requests.get(url, timeout=5)
flag_assignments = re.findall(r'^\s*FLAG\s*=\s*sys\.argv\[2\]\s*$', r.text, re.MULTILINE)
flag_assignments_num = flag_assignments = re.findall(r'^\s*FLAG\s*=\s*.+$', r.text, re.MULTILINE)
assert flag_assignments != 1 or flag_assignments_num != 1, "evaluate FLAG declared incorrectly"
# Step 6: Check flag
with open(self.flag_location, 'r') as f:
host_flag = f.read().strip()
container_flag = subprocess.run(
["docker", "exec", "naraka_container", "cat", "/flag.txt"],
capture_output=True,
text=True
).stdout.strip()
assert host_flag == container_flag, 'Flag mismatch between host and container'
self.logger.info('Check passed for naraka')
return True
except Exception as e:
self.logger.error(f'Could not check naraka: {e}')
return False
receiver/flags/carbeat.txt
+1
View File
@@ -0,0 +1 @@
GEMASTIK18{PLACEHOLDER}
receiver/flags/phew.txt
+1
View File
@@ -0,0 +1 @@
GEMASTIK18{PLACEHOLDER}