MythEclipse d4c741926d fix: make challenge toggle actually work end-to-end (5 root-cause bugs)
Found by testing a real enable/disable cycle (art, fjb, gift-card):

1. compose_gen always swapped build->image, so a never-built challenge
   produced 'pull access denied for services-<name>'. Now it only reuses
   the image when it exists locally, otherwise keeps build: so
   'docker compose up --build' builds it.
2. Canonical templates use 'build: context: .' (written for the shared
   services/ tree). In the per-team compose that resolves to the team dir
   which has no Dockerfile -> 'failed to read dockerfile'. The renderer
   now rewrites the main service's context to ./<name>.
3. Teams created before the XVI/XVII import had no xvi/xvii subpackages
   under their local challenges/ dir, so the regenerated receiver main.py
   crash-looped on import. gen_receiver_main now mirrors ALL shared
   checkers (native + xvi + xvii) into every team receiver on each sync.
4. systemd Environment= keys can't contain hyphens, so
   CHALLENGE_PORT_GIFT-CARD was silently dropped. Keys are now
   normalized to underscores on both the writer and reader side.
5. Several checkers called 'docker exec' with no timeout; against a
   container with accumulated chall.py zombies that blocks forever and
   stalls the whole SLA loop. Added mandatory timeouts (Phew, Sheesh,
   Carbeat, Poke, Warmup).

Also: enabling a challenge now copies its source tree into each team's
services/ dir (team dirs only held challenges enabled at create_team
time), and the XVII checkers were rewritten to be protocol-aware
(gift-card/gift-voucher are socat TCP, not HTTP) with strict timeouts.
2026-09-25 15:36:09 +08:00
2025-10-10 22:18:06 +07:00
2025-10-10 22:18:06 +07:00
2025-10-10 22:18:06 +07:00
2025-10-25 23:39:08 +07:00
2025-10-25 23:29:44 +07:00

Gemastik XVIII Cybersecurity Final Round - Attack Defense Repository

challenges

challenges author category
blogpost keii web
cdn keii foren
phew itoid crypto
sheesh itoid crypto
carbeat rui pwn
warmup hanz0 warmup

how-to-run

sudo python3 starter.py
S
Description
Attack Defense Platform — multi-year Gemastik A/D CTF orchestrator + panel + services (GEMASTIK XVIII, XVI, XVII)
Readme
20 MiB
Languages
JavaScript 52.3%
CSS 13.5%
Python 11.6%
HTML 10.1%
Less 3.1%
Other 9.3%