Initial commit

receiver/main.py.old

@@ -0,0 +1,116 @@
+from fastapi import Depends, FastAPI, HTTPException
+from pydantic import BaseModel
+from fastapi.security import HTTPBasic, HTTPBasicCredentials
+from config import get_settings
+
+from challenges.Art import Art
+from challenges.XL import XL
+from challenges.GemasNotes import GemasNotes
+from challenges.Pasta import Pasta
+from challenges.Burvesigner import Burvesigner
+from challenges.S3 import S3
+from challenges.Crawlback import Crawlback
+from challenges.BackToBasic import BackToBasic
+from challenges.GemasFetcher import GemasFetcher
+from challenges.Hirnfick import Hirnfick
+
+import os
+
+app = FastAPI()
+security = HTTPBasic()
+settings = get_settings()
+
+challenges = {
+    "art": Art(10000),
+    "xl": XL(11000),
+    "gemas-notes": GemasNotes(12000),
+    "pasta": Pasta(13000),
+    "burvesigner": Burvesigner(14000),
+    "hirnfick": Hirnfick(15000),
+    "gemas-fetcher": GemasFetcher(16000),
+    "s3": S3(20000),
+    "crawlback": Crawlback(21000),
+    "back-to-basic": BackToBasic(22000),
+}
+
+
+class Flag(BaseModel):
+    flag: str
+    challenge: str
+
+class History(BaseModel):
+    log: str
+
+
+@app.get("/")
+def read_root():
+    return {"service": "receiver-service"}
+
+
+@app.get("/restart/{challenge}")
+def restart(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, challenge)
+    os.system(f"docker compose -f {settings.COMPOSE_LOCATION} restart {challenge}")
+    return {"message": "Challenge restarted"}
+
+
+@app.get("/rollback/{challenge}")
+def rollback(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, challenge)
+    os.system(f"docker compose -f {settings.COMPOSE_LOCATION} up -d --force-recreate {challenge}")
+    return {"message": "Challenge restarted"}
+
+
+@app.get("/activate/{challenge}")
+def activate(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, challenge)
+    os.system(f"docker compose -f {settings.COMPOSE_LOCATION} up -d {challenge}")
+    return {"message": "Challenge activated"}
+
+
+@app.get("/deactivate/{challenge}")
+def deactive(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, challenge)
+    os.system(f"docker compose -f {settings.COMPOSE_LOCATION} down {challenge}")
+    return {"message": "Challenge deactivated"}
+
+
+@app.get("/credential/{challenge}")
+def credential(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, challenge)
+    return challenges[challenge].credentials()
+
+
+@app.post("/flag")
+def receive(data: Flag, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, data.challenge)
+    challenge = challenges[data.challenge]
+    if challenge.distribute(data.flag):
+        return {"message": "Flag received"}
+
+    raise HTTPException(status_code=500, detail="Error receiving flag")
+
+
+@app.get("/check/{challenge}")
+def check(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
+    validate(credentials, challenge)
+    return {"success": challenges[challenge].check()}
+
+@app.post("/history")
+def history(data: History):
+    with open('history/command.txt', 'a') as f:
+        f.write(data.log + '\n')
+    return {"message": "Command received"}
+
+def is_admin(credentials):
+    if credentials.username != settings.ADMIN_USERNAME or credentials.password != settings.ADMIN_PASSWORD:
+        return False
+    return True
+
+
+def validate(credentials, challenge):
+    if not is_admin(credentials):
+        raise HTTPException(status_code=401, detail="Invalid credentials")
+
+    if challenge not in challenges:
+        raise HTTPException(status_code=400, detail="Invalid challenge")