117 lines
3.6 KiB
Plaintext
117 lines
3.6 KiB
Plaintext
from fastapi import Depends, FastAPI, HTTPException
|
|
from pydantic import BaseModel
|
|
from fastapi.security import HTTPBasic, HTTPBasicCredentials
|
|
from config import get_settings
|
|
|
|
from challenges.Art import Art
|
|
from challenges.XL import XL
|
|
from challenges.GemasNotes import GemasNotes
|
|
from challenges.Pasta import Pasta
|
|
from challenges.Burvesigner import Burvesigner
|
|
from challenges.S3 import S3
|
|
from challenges.Crawlback import Crawlback
|
|
from challenges.BackToBasic import BackToBasic
|
|
from challenges.GemasFetcher import GemasFetcher
|
|
from challenges.Hirnfick import Hirnfick
|
|
|
|
import os
|
|
|
|
app = FastAPI()
|
|
security = HTTPBasic()
|
|
settings = get_settings()
|
|
|
|
challenges = {
|
|
"art": Art(10000),
|
|
"xl": XL(11000),
|
|
"gemas-notes": GemasNotes(12000),
|
|
"pasta": Pasta(13000),
|
|
"burvesigner": Burvesigner(14000),
|
|
"hirnfick": Hirnfick(15000),
|
|
"gemas-fetcher": GemasFetcher(16000),
|
|
"s3": S3(20000),
|
|
"crawlback": Crawlback(21000),
|
|
"back-to-basic": BackToBasic(22000),
|
|
}
|
|
|
|
|
|
class Flag(BaseModel):
|
|
flag: str
|
|
challenge: str
|
|
|
|
class History(BaseModel):
|
|
log: str
|
|
|
|
|
|
@app.get("/")
|
|
def read_root():
|
|
return {"service": "receiver-service"}
|
|
|
|
|
|
@app.get("/restart/{challenge}")
|
|
def restart(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, challenge)
|
|
os.system(f"docker compose -f {settings.COMPOSE_LOCATION} restart {challenge}")
|
|
return {"message": "Challenge restarted"}
|
|
|
|
|
|
@app.get("/rollback/{challenge}")
|
|
def rollback(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, challenge)
|
|
os.system(f"docker compose -f {settings.COMPOSE_LOCATION} up -d --force-recreate {challenge}")
|
|
return {"message": "Challenge restarted"}
|
|
|
|
|
|
@app.get("/activate/{challenge}")
|
|
def activate(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, challenge)
|
|
os.system(f"docker compose -f {settings.COMPOSE_LOCATION} up -d {challenge}")
|
|
return {"message": "Challenge activated"}
|
|
|
|
|
|
@app.get("/deactivate/{challenge}")
|
|
def deactive(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, challenge)
|
|
os.system(f"docker compose -f {settings.COMPOSE_LOCATION} down {challenge}")
|
|
return {"message": "Challenge deactivated"}
|
|
|
|
|
|
@app.get("/credential/{challenge}")
|
|
def credential(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, challenge)
|
|
return challenges[challenge].credentials()
|
|
|
|
|
|
@app.post("/flag")
|
|
def receive(data: Flag, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, data.challenge)
|
|
challenge = challenges[data.challenge]
|
|
if challenge.distribute(data.flag):
|
|
return {"message": "Flag received"}
|
|
|
|
raise HTTPException(status_code=500, detail="Error receiving flag")
|
|
|
|
|
|
@app.get("/check/{challenge}")
|
|
def check(challenge: str, credentials: HTTPBasicCredentials = Depends(security)):
|
|
validate(credentials, challenge)
|
|
return {"success": challenges[challenge].check()}
|
|
|
|
@app.post("/history")
|
|
def history(data: History):
|
|
with open('history/command.txt', 'a') as f:
|
|
f.write(data.log + '\n')
|
|
return {"message": "Command received"}
|
|
|
|
def is_admin(credentials):
|
|
if credentials.username != settings.ADMIN_USERNAME or credentials.password != settings.ADMIN_PASSWORD:
|
|
return False
|
|
return True
|
|
|
|
|
|
def validate(credentials, challenge):
|
|
if not is_admin(credentials):
|
|
raise HTTPException(status_code=401, detail="Invalid credentials")
|
|
|
|
if challenge not in challenges:
|
|
raise HTTPException(status_code=400, detail="Invalid challenge")
|