secgroup / ctforge Goto Github PK

Man, finding a CTF platform for attack/defense has been very difficult! I was very excited to find this! However, I am looking to host a CTF with both attack/defense and jeopardy style. Does this have the capability to do a combination? If not, how hard would it be to edit the existing codebase for this?

Thanks!

https://www.chartjs.org/

I am running a CTF in a little over a month and would love to get the attack/defense challenges working on the scoreboard because of the bots. I have been attempting to understand how the bots for checking flags actually work for about a week now. But, I have not been able to figure out where the scripts are actually written to, how to set which type of flag bot to use (advanced, check and dispatch) and a few other things with the bots.

Ideally, I would ask for some documentation be written about the bots. But, with the consideration of time, could some previous examples of the setup and scripts be put into an example folder? Or, describe how it works some here?

Thanks for the scoreboard, again! I really appreciate all of this; thanks for the help!

Hidden challenges are displayed in the scoreboard graph and there are probably other leakages on some JSON endpoints. Although not critical, we should fix this issue.

I have a small issue with the scoreboard graph: For some reason it seems to be displaying the score per team per round instead of combining the rounds for all teams (can be seen on the screenshot). It looks like that is unintended. Do you have any idea what could be causing this and how I can fix it?

I am using the challenge-ad branch. I created the teams by directly inserting them into the database. ctf_stats/300 returns this json file:

{
  "asdasd": {
    "0": 0.0, 
    "1": 0.0, 
    "2": 0.0
  }, 
  "asdgd": {
    "0": 0.0, 
    "1": 0.0, 
    "2": 0.0
  }, 
  "hsas": {
    "0": 0.0, 
    "1": 0.0, 
    "2": 0.0
  }, 
  "team1": {
    "0": 0.0, 
    "1": 2.23606797749979, 
    "2": 2.23606797749979
  }, 
  "team2": {
    "0": 0.0, 
    "1": 0.0, 
    "2": 0.0
  }
}

Let me know if you need more information on the exact setup I am using.

Thanks!

The admin panel must be enriched with a functionality to allow deletion of users, challenges and services. Adding cascade delete constraints on the db schema should do the job, but we must be sure that no circular dependencies are in place.

Having an major issue with flask.ext does not exist upon running the intial ctforge command. Any idea how to fix this?