Bl4ze/dev

.gitignore

@@ -7,3 +7,4 @@ site/
 ubuntu-bionic-18.04-cloudimg-console.log
 target/
 .vscode/
+vendor/

_examples/README.md

@@ -13,7 +13,9 @@
 * [PHP Web challenge](./web-php)
 * [PHP Web challenge with MySQL](./web-php-mysql)
 * [Challenge with Static files only](./static-chall)
-* [Xinted Service challenge](./xinetd-service)
+* [Xinted Service challenge with custom xinetd config](./xinetd-service)
+* [Service challenge with auto-generated xinetd config](./service)
+* [A bare challenge using docker](./bare-docker)
 
 To test any of the above challenges, cd to \_example directory and use the below command:
 

_examples/docker-type/beast.toml → _examples/bare-docker/beast.toml

@@ -6,8 +6,16 @@ ssh_key = "ssh-rsa AAAAB3NzaC1y"
 [challenge.metadata]
 name = "docker-type"
 flag = "FLAG{r3GEx_i5_3vi1!!}"
-type = "docker"
-hints = ["simple_hint_1", "simple_hint_2"]
+type = "bare"
+points = 200
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
 
 [challenge.env]
 docker_context = "docker-file"

_examples/example.config.toml

@@ -11,11 +11,60 @@ scripts_dir = "$HOME/.beast/scripts"
 # Base OS image that beast allows the challenges to use.
 allowed_base_images = ["ubuntu:18.04", "ubuntu:16.04", "debian:jessie"]
 
+# The sidecar that we support with beast, currently we only support two MySQL and
+# MongoDB.
+available_sidecars = ["mysql", "mongodb"]
 
 # For authentication purposes beast uses JWT based authentication, this is the
 # key used for encrypting the claims of a user. Keep this strong.
 jwt_secret = "beast_jwt_secret_SUPER_STRONG_0x100010000100"
 
+#Health Prober, if active, starts a health prober on a thread which checks for
+#deployed challenges, containers and servers after every ticker_frequency period
+health_prober = false
+
+# The frequency for any periodic event in beast, the value is provided in seconds.
+# This is currently only used for health check periodic durations.
+ticker_frequency = 3000
+
+
+# Container default resource limits for each challenge, this can be
+# Overridden by challenge configuration beast.toml file.
+default_cpu_shares = 1024
+default_memory_limit = 1024
+default_pids_limit = 100
+
+# List of ip addresses of all the servers where challenge could be deployed for 
+# balanced load accross servers. 
+[available_servers]
+# [available_servers."host"]
+[available_servers."192.168.1.1"]
+# IP-address/Hostname of the server
+host = "192.168.1.1"
+
+# Username to be used for ssh connection
+username = "user1"
+
+# Path to private SSH key for interacting with the server.
+ssh_key_path = "/path/to/your/private/key1"
+
+# Status of remote server to be used
+# If it is set to false then that remote server will not be used
+active = false
+
+[available_servers.localhost]
+# IP-address/Hostname of the server
+host = "localhost"
+
+# Username to be used for ssh connection (Leave empty for localhost)
+username = "user1"
+
+# Path to private SSH key for interacting with the server. (Leave empty for localhost)
+ssh_key_path = "/path/to/your/private/key1"
+
+# Status of remote server to be used
+active = true
+
 
 # To allow beast to send notification to a notification channel povide this webhook URL
 # We are also working on implmeneting notification using IRC.
@@ -31,30 +80,14 @@ service_name = "discord"
 # If it is false then notification will not be sent on this URL
 active = false
 
-# The sidecar that we support with beast, currently we only support two MySQL and
-# MongoDB.
-available_sidecars = ["mysql", "mongodb"]
-
-
-# The frequency for any periodic event in beast, the value is provided in seconds.
-# This is currently only used for health check periodic duration.s
-ticker_frequency = 3000
-
-
-# Container default resource limits for each challenge, this can be
-# Overridden by challenge configuration beast.toml file.
-default_cpu_shares = 1024
-default_memory_limit = 1024
-default_pids_limit = 100
-
-
 # Configuration corresponding to the remote repository used by beast
 # We use ssh authentication mechanism for interacting with git repository.
 [[remote]]
 
 # URL of the remote git repository, this should be user@host:<git_repository> format
 url = "[email protected]:sdslabs/hack-test.git"
-
+
+
 # Name of the remote
 name = "hack-test"
 
@@ -68,10 +101,26 @@ ssh_key = "$HOME/.beast/secrets/key.priv"
 # If it is set to false then that remote git repository will not be used
 active = false
 
+[mail_config]
+from = "[email protected]"
+password = "your-email-password"
+smtpHost = "smtp.example.com"
+smtpPort = "587"
+
+# Configuration to connect to Postgresql database 
+[psql_config]
+
+user = "beast"
+password = "12345678"
+dbname = "beast"
+host = "localhost"
+port = "5432"
+sslmode = "prefer"
+
 # The following fields are required only while hosting a competition on beast
 # This section contains information about the competition to be hosted
 # Structure of the sections with the acceptable fields are:
-[[competition_info]]
+[competition_info]
 # Required Fields
 
 # Name of the competition   
@@ -96,3 +145,6 @@ prizes = ""
 
 # Absolute path of logo file. Default logo dir is in the "BEAST_GLOBAL_DIR/assets/"
 logo_url = ""
+
+# Dynamic scoring for challenges
+dynamic_score = false

_examples/service/beast.toml

@@ -0,0 +1,26 @@
+[author]
+name = "fristonio"
+email = "[email protected]"
+ssh_key = "ssh-rsa AAAAB3NzaC1y"
+
+[challenge.metadata]
+name = "service"
+flag = "CTF{sample_flag}"
+type = "service"
+points = 100
+maxAttemptLimit = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
+
+
+[challenge.env]
+apt_deps = ["gcc", "socat"]
+setup_scripts = ["setup.sh"]
+service_path = "pwn"
+ports = [10004]

_examples/service/pwn_me.c

@@ -0,0 +1,29 @@
+#include <stdio.h>
+#include <unistd.h>
+
+int sample()
+{	FILE *ptr_file;
+	char buf[100];
+
+	ptr_file = fopen("flag.txt","r");
+	if (!ptr_file)
+		return 1;
+
+	while (fgets(buf,100, ptr_file)!=NULL)
+		fprintf(stderr, "%s",buf);
+	fclose(ptr_file);
+	return 0;
+}
+
+void test()
+{	char input[50];
+	printf("Please enter your name: ");
+	gets(input);
+	sleep(1);
+	fprintf(stderr, "ECHO: %s\n",input); 
+}
+
+int main()
+{	test();
+	return 0;
+}

_examples/service/setup.sh

@@ -0,0 +1,3 @@
+set -e
+
+gcc -o pwn pwn_me.c

_examples/simple/beast.toml

@@ -1,16 +1,24 @@
 [author]
-name = "fristonio"
-email = "[email protected]"
-ssh_key = "ssh-rsa AAAAB3NzaC1y"
+name = "hi"
+email = "[email protected]"
+ssh_key = "hi"
 
 [challenge.metadata]
 name = "simple"
 flag = "BACKDOOR{SAMPLE_FLAG}"
 type = "bare"
-hints = ["simple_hint_1", "simple_hint_2"]
+points = 100
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
 
 [challenge.env]
 apt_deps = ["gcc", "socat"]
 setup_scripts = ["setup.sh"]
-run_cmd = "socat tcp-l:10001,fork,reuseaddr exec:./pwn"
-ports = [10001]
+run_cmd = "socat tcp-l:10005,fork,reuseaddr exec:./pwn"
+ports = [10005]

_examples/static-chall/beast.toml

@@ -7,5 +7,19 @@ ssh_key = "ssh-rsa AAAAB3NzaC1y"
 name = "static-chall"
 flag = "BACKDOOR{SAMPLE_FLAG}"
 type = "static"
-hints = ["static_hint_1", "static_hint_2"]
-tags = ["easy"]
+points=150
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
+
+maxPoints = 100
+minPoints = 50
+tags = ["easy", "web"]
+
+[challenge.env]
+static_dir = "static"

_examples/web-php-mysql/beast.toml

@@ -7,8 +7,17 @@ ssh_key = "ssh-rsa AAAAB3NzaC1y"
 name = "web-php-mysql"
 flag = "CTF{sample_flag}"
 type = "web:php:7.1:cli"
-sidecar = "mysql"
-hints = ["web-php-mysql_hint_1", "web-php-mysql_hint_2"]
+points = 200
+maxAttemptLimit = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
+
 
 [challenge.env]
 apt_deps = ["gcc", "php*-mysql"]

_examples/web-php/beast.toml

@@ -7,7 +7,17 @@ ssh_key = "ssh-rsa AAAAB3NzaC1y"
 name = "web-php"
 flag = "BACKDOOR{SAMPLE_WEB_FLAG}"
 type = "web:php:7.1:cli"
-hints = ["web_hint_1", "web_hint_2"]
+maxAttemptLimit = 3
+points = 200
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
+
 
 [challenge.env]
 ports = [10002]

_examples/xinetd-service/beast.toml

@@ -1,16 +1,29 @@
 [author]
-name = "fristonio"
-email = "contact+fristonio@sdslabs.co.in"
+name = "contact"
+email = "[email protected]"
 ssh_key = "ssh-rsa AAAAB3NzaC1y"
 
 [challenge.metadata]
 name = "xinetd-service"
-flag = "CTF{sample_flag}"
+flag = "CTF{not_the_flag}"
 type = "service"
-hints = ["xinetd_hint_1", "xinetd_hint_2"]
+points = 500
+maxAttemptLimit = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_1"
+points = 10
+
+[[challenge.metadata.hints]]
+text = "simple_hint_2"
+points = 20
+
+preReqs = ["simple", "web-php"]
+
 
 [challenge.env]
 apt_deps = ["gcc", "socat"]
 setup_scripts = ["setup.sh"]
+xinetd_config = "ctf.xinetd"
 service_path = "pwn"
 ports = [10003]

_examples/xinetd-service/ctf.xinetd

@@ -0,0 +1,18 @@
+service xinetd-service
+{
+    disable = no
+    socket_type = stream
+    protocol    = tcp
+    wait        = no
+    user        = beast
+    type        = UNLISTED
+    port        = 10003
+    bind        = 0.0.0.0
+    server      = /bin/sh
+    server_args = -c cd${IFS}/challenge;exec${IFS}/challenge/pwn
+    banner_fail = /etc/banner_fail
+    # Options below are for safety mainly
+    #per_source  = 10 # max instances per source at once
+    rlimit_cpu  = 5 # max cpu seconds
+    #rlimit_as  = 1024M # addr space resource limit
+}

_examples/xinetd-service/flag.txt

@@ -0,0 +1 @@
+CTF{not_the_flag}

_examples/xinetd-service/pwn_me.c

@@ -17,6 +17,8 @@ int sample()
 
 void test()
 {	char input[50];
+	printf("Please enter your name: ");
+	fflush(stdout);
 	gets(input);
 	sleep(1);
 	fprintf(stderr, "ECHO: %s\n",input);