Delete services/phew directory
This commit is contained in:
itoid
@@ -1,32 +0,0 @@
|
||||
FROM python:3.12-slim
|
||||
|
||||
ARG PASSWORD=root
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
ENV HOME=/home/ctf
|
||||
WORKDIR /home/ctf/chall
|
||||
|
||||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||||
openssh-server \
|
||||
build-essential \
|
||||
libffi-dev \
|
||||
libssl-dev \
|
||||
python3-dev \
|
||||
bash \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
RUN useradd -m -d /home/ctf -s /bin/bash ctf && \
|
||||
echo "ctf:${PASSWORD}" | chpasswd
|
||||
|
||||
RUN mkdir -p /var/run/sshd
|
||||
|
||||
COPY requirements.txt /tmp/requirements.txt
|
||||
RUN pip install --no-cache-dir -r /tmp/requirements.txt
|
||||
|
||||
COPY ./src /home/ctf/chall/src
|
||||
COPY ./start.sh /start.sh
|
||||
RUN chmod +x /start.sh /home/ctf/chall/src/run.sh
|
||||
|
||||
RUN chown -R root:root /home/ctf/chall && chmod -R 555 /home/ctf/chall
|
||||
|
||||
EXPOSE 8000 22
|
||||
CMD ["/start.sh"]
|
||||
@@ -1,126 +0,0 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import os, sys, json, random, hashlib, hmac
|
||||
from Crypto.Cipher import AES
|
||||
from Crypto.Util.Padding import pad
|
||||
with open("/flag.txt", "rb") as f:
|
||||
flag = f.read()
|
||||
|
||||
menu = (
|
||||
"1) encrypt\n"
|
||||
"2) profit\n"
|
||||
"3) nyerah\n"
|
||||
">> "
|
||||
)
|
||||
|
||||
|
||||
k = 1024
|
||||
n = 169
|
||||
|
||||
rng = random.SystemRandom()
|
||||
|
||||
def rand(k_bits: int) -> int:
|
||||
return rng.randrange(1, 1 << k_bits)
|
||||
|
||||
def gen(n: int, k_bits: int):
|
||||
a = [rand(k_bits) for _ in range(n)]
|
||||
return a
|
||||
|
||||
def b2b(b: bytes) -> list[int]:
|
||||
out = []
|
||||
for byte in b:
|
||||
for i in range(8):
|
||||
out.append((byte >> i) & 1)
|
||||
return out
|
||||
|
||||
def pack(bits) -> bytes:
|
||||
out = bytearray()
|
||||
for i in range(0, len(bits), 8):
|
||||
chunk = bits[i:i+8]
|
||||
val = 0
|
||||
for j, bit in enumerate(chunk):
|
||||
val |= (bit & 1) << j
|
||||
out.append(val)
|
||||
return bytes(out)
|
||||
|
||||
def gen_key(x_bits: list[int], saltx: bytes, salty: bytes, length: int = 16) -> bytes:
|
||||
material = pack(x_bits)
|
||||
prk = hashlib.pbkdf2_hmac("sha256", material, saltx, 131072, dklen=32)
|
||||
return hmac.new(prk, b"afk-players-wanted-now" + salty + b"\x01", hashlib.sha256).digest()[:length]
|
||||
|
||||
def enc(k: bytes, data: bytes):
|
||||
iv = os.urandom(16)
|
||||
ct = AES.new(k, AES.MODE_CBC, iv).encrypt(pad(data, 16))
|
||||
return iv, ct
|
||||
|
||||
def add(a, x_bits) -> int:
|
||||
return sum(ai for ai, xi in zip(a, x_bits) if xi)
|
||||
|
||||
def main():
|
||||
a = gen(n, k)
|
||||
x_bits = b2b(flag)
|
||||
if len(x_bits) < n:
|
||||
x_bits += [rng.randrange(0, 2) for _ in range(n - len(x_bits))]
|
||||
else:
|
||||
x_bits = x_bits[:n]
|
||||
|
||||
s = add(a, x_bits)
|
||||
|
||||
saltx = os.urandom(16)
|
||||
salty = os.urandom(16)
|
||||
key = gen_key(x_bits, saltx, salty)
|
||||
|
||||
iv, ct = enc(key, flag)
|
||||
|
||||
header = {
|
||||
"n": n,
|
||||
"k_bits": k,
|
||||
}
|
||||
print(json.dumps(header, separators=(",", ":")), flush=True)
|
||||
|
||||
while True:
|
||||
try:
|
||||
print(menu, end="", flush=True)
|
||||
line = sys.stdin.readline()
|
||||
if not line:
|
||||
break
|
||||
try:
|
||||
choice = int(line.strip())
|
||||
except ValueError:
|
||||
print("sheesh")
|
||||
continue
|
||||
|
||||
if choice == 1:
|
||||
print("data: ", end="", flush=True)
|
||||
dline = sys.stdin.readline()
|
||||
if not dline:
|
||||
break
|
||||
try:
|
||||
data = bytes.fromhex(dline.strip())
|
||||
except Exception:
|
||||
print("hmmm")
|
||||
continue
|
||||
iv, ct = enc(key, data)
|
||||
print(iv.hex())
|
||||
print(ct.hex())
|
||||
|
||||
elif choice == 2:
|
||||
print(json.dumps({"a": a}, separators=(",", ":")))
|
||||
print(str(s))
|
||||
print(saltx.hex())
|
||||
print(salty.hex())
|
||||
print(iv.hex())
|
||||
print(ct.hex())
|
||||
|
||||
elif choice == 3:
|
||||
print("bubay")
|
||||
return
|
||||
|
||||
else:
|
||||
print("tidak ada yang mustahil, hehehe")
|
||||
|
||||
except Exception:
|
||||
print("zzz")
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
Vendored
-126
@@ -1,126 +0,0 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import os, sys, json, random, hashlib, hmac
|
||||
from Crypto.Cipher import AES
|
||||
from Crypto.Util.Padding import pad
|
||||
with open("/flag.txt", "rb") as f:
|
||||
flag = f.read()
|
||||
|
||||
menu = (
|
||||
"1) encrypt\n"
|
||||
"2) profit\n"
|
||||
"3) nyerah\n"
|
||||
">> "
|
||||
)
|
||||
|
||||
|
||||
k = 1024
|
||||
n = 169
|
||||
|
||||
rng = random.SystemRandom()
|
||||
|
||||
def rand(k_bits: int) -> int:
|
||||
return rng.randrange(1, 1 << k_bits)
|
||||
|
||||
def gen(n: int, k_bits: int):
|
||||
a = [rand(k_bits) for _ in range(n)]
|
||||
return a
|
||||
|
||||
def b2b(b: bytes) -> list[int]:
|
||||
out = []
|
||||
for byte in b:
|
||||
for i in range(8):
|
||||
out.append((byte >> i) & 1)
|
||||
return out
|
||||
|
||||
def pack(bits) -> bytes:
|
||||
out = bytearray()
|
||||
for i in range(0, len(bits), 8):
|
||||
chunk = bits[i:i+8]
|
||||
val = 0
|
||||
for j, bit in enumerate(chunk):
|
||||
val |= (bit & 1) << j
|
||||
out.append(val)
|
||||
return bytes(out)
|
||||
|
||||
def gen_key(x_bits: list[int], saltx: bytes, salty: bytes, length: int = 16) -> bytes:
|
||||
material = pack(x_bits)
|
||||
prk = hashlib.pbkdf2_hmac("sha256", material, saltx, 131072, dklen=32)
|
||||
return hmac.new(prk, b"afk-players-wanted-now" + salty + b"\x01", hashlib.sha256).digest()[:length]
|
||||
|
||||
def enc(k: bytes, data: bytes):
|
||||
iv = os.urandom(16)
|
||||
ct = AES.new(k, AES.MODE_CBC, iv).encrypt(pad(data, 16))
|
||||
return iv, ct
|
||||
|
||||
def add(a, x_bits) -> int:
|
||||
return sum(ai for ai, xi in zip(a, x_bits) if xi)
|
||||
|
||||
def main():
|
||||
a = gen(n, k)
|
||||
x_bits = b2b(flag)
|
||||
if len(x_bits) < n:
|
||||
x_bits += [rng.randrange(0, 2) for _ in range(n - len(x_bits))]
|
||||
else:
|
||||
x_bits = x_bits[:n]
|
||||
|
||||
s = add(a, x_bits)
|
||||
|
||||
saltx = os.urandom(16)
|
||||
salty = os.urandom(16)
|
||||
key = gen_key(x_bits, saltx, salty)
|
||||
|
||||
iv, ct = enc(key, flag)
|
||||
|
||||
header = {
|
||||
"n": n,
|
||||
"k_bits": k,
|
||||
}
|
||||
print(json.dumps(header, separators=(",", ":")), flush=True)
|
||||
|
||||
while True:
|
||||
try:
|
||||
print(menu, end="", flush=True)
|
||||
line = sys.stdin.readline()
|
||||
if not line:
|
||||
break
|
||||
try:
|
||||
choice = int(line.strip())
|
||||
except ValueError:
|
||||
print("sheesh")
|
||||
continue
|
||||
|
||||
if choice == 1:
|
||||
print("data: ", end="", flush=True)
|
||||
dline = sys.stdin.readline()
|
||||
if not dline:
|
||||
break
|
||||
try:
|
||||
data = bytes.fromhex(dline.strip())
|
||||
except Exception:
|
||||
print("hmmm")
|
||||
continue
|
||||
iv, ct = enc(key, data)
|
||||
print(iv.hex())
|
||||
print(ct.hex())
|
||||
|
||||
elif choice == 2:
|
||||
print(json.dumps({"a": a}, separators=(",", ":")))
|
||||
print(str(s))
|
||||
print(saltx.hex())
|
||||
print(salty.hex())
|
||||
print(iv.hex())
|
||||
print(ct.hex())
|
||||
|
||||
elif choice == 3:
|
||||
print("bubay")
|
||||
return
|
||||
|
||||
else:
|
||||
print("tidak ada yang mustahil, hehehe")
|
||||
|
||||
except Exception:
|
||||
print("zzz")
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
@@ -1,16 +0,0 @@
|
||||
version: "3.8"
|
||||
|
||||
services:
|
||||
phew:
|
||||
container_name: phew_container
|
||||
hostname: phew
|
||||
restart: always
|
||||
build:
|
||||
context: .
|
||||
args:
|
||||
- PASSWORD=root
|
||||
ports:
|
||||
- "13000:8000"
|
||||
- "13022:22"
|
||||
environment:
|
||||
- FLAG=GEMASTIK{local_flag}
|
||||
@@ -1 +0,0 @@
|
||||
pycryptodome
|
||||
@@ -1,3 +0,0 @@
|
||||
#!/bin/sh
|
||||
|
||||
exec socat tcp-l:8000,reuseaddr,fork exec:"python3 ./chall.py"
|
||||
@@ -1,25 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
ssh-keygen -A
|
||||
|
||||
# Configure SSH
|
||||
grep -q "^PermitRootLogin" /etc/ssh/sshd_config && \
|
||||
sed -i "s/^PermitRootLogin.*/PermitRootLogin no/" /etc/ssh/sshd_config || \
|
||||
echo "PermitRootLogin no" >> /etc/ssh/sshd_config
|
||||
|
||||
grep -q "^PasswordAuthentication" /etc/ssh/sshd_config && \
|
||||
sed -i "s/^PasswordAuthentication.*/PasswordAuthentication yes/" /etc/ssh/sshd_config || \
|
||||
echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config
|
||||
|
||||
echo "AllowUsers ctf" >> /etc/ssh/sshd_config
|
||||
|
||||
/usr/sbin/sshd
|
||||
|
||||
if [ -n "$FLAG" ]; then
|
||||
echo "$FLAG" > /flag.txt
|
||||
chmod 644 /flag.txt
|
||||
chown root:root /flag.txt
|
||||
fi
|
||||
|
||||
exec su -c "cd /home/ctf/chall/src && ./run.sh" -s /bin/bash ctf
|
||||
Reference in New Issue
Block a user