43ed3df557e4e4d879976fdb27a6e661974a9432
- Portal tim punya login sendiri (password = ssh_pass, session team_token)
- SSH Web GUI: /api/team/{idx}/ssh/ws (WebSocket+paramiko) → xterm.js terminal
(fix: ssh_to_ws non-blocking poll, chall_passwords per-container auth)
- Root <slug>.gemastik.imrnes.team → portal tim (bukan login admin)
- Host validation: /team/{idx} & /team/{idx}/guide 403 kalau host != team domain
- /api/team/{idx}/targets: daftar service tim musuh (attack target)
- guide.html: panduan SSH/attack/defense untuk peserta
- fix esc() String(s) (bug: (s||'').replace is not a function saat port number)
- set_ssh_passwords retry loop (container boot race)
Gemastik XVIII Cybersecurity Final Round - Attack Defense Repository
challenges
| challenges | author | category |
|---|---|---|
| blogpost | keii | web |
| cdn | keii | foren |
| phew | itoid | crypto |
| sheesh | itoid | crypto |
| carbeat | rui | pwn |
| warmup | hanz0 | warmup |
how-to-run
sudo python3 starter.py
Description
Attack Defense Platform — multi-year Gemastik A/D CTF orchestrator + panel + services (GEMASTIK XVIII, XVI, XVII)
20 MiB
Languages
JavaScript
52.3%
CSS
13.5%
Python
11.6%
HTML
10.1%
Less
3.1%
Other
9.3%