8334978252

Committed 18 Mar 2024 11:21PM UTC coverage: 94.947% (-0.3%) from 95.2%

Build # 8334978252

Build Type

push

github

Committed by

web-flow

Commit Message

Merge pull request #137 from meelunae/develop

FEATURE: Defining multiple flags in challenge for CTFd

Run Details

86 of 113 branches covered (76.11%)

0 of 1 new or added line in 1 file covered. (0.0%)

357 of 376 relevant lines covered (94.95%)

132.28 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

91.3

/lib/generators/ctfd.js

/*
 * Copyright (c) 2016-2022 Bjoern Kimminich & the OWASP Juice Shop contributors.
 * SPDX-License-Identifier: MIT
 */

const Promise = require('bluebird')
const calculateScore = require('../calculateScore')
// const calculateHintCost = require('../calculateHintCost')
const hmacSha1 = require('../hmac')
const options = require('../options')

function createCtfdExport (challenges, { insertHints, insertHintUrls, insertHintSnippets, ctfKey, vulnSnippets }) {
  function insertChallengeHints (challenge) {
    const hints = []
    if (challenge.hint && insertHints !== options.noTextHints) {
      hints.push(challenge.hint.replaceAll('"', '""').replaceAll(',', '٬'))
    }
    if (challenge.hintUrl && insertHintUrls !== options.noHintUrls) {
      hints.push(challenge.hintUrl)
    }
    if (vulnSnippets[challenge.key] && insertHintSnippets !== options.noHintSnippets) {
      hints.push('<pre><code>' + vulnSnippets[challenge.key].replaceAll('"', '""').replaceAll(',', '٬') + '</code></pre>')
    }
    return (hints.length === 0 ? '' : `"${hints.join(',')}"`)
  }

  /*
  function insertChallengeHintCosts (challenge) {
    const hintCosts = []
    if (challenge.hint && insertHints !== options.noTextHints) {
      hintCosts.push(calculateHintCost(challenge, insertHints))
    }
    if (challenge.hintUrl && insertHintUrls !== options.noHintUrls) {
      hintCosts.push(calculateHintCost(challenge, insertHintUrls))
    }
    if (vulnSnippets[challenge.key] && insertHintSnippets !== options.noHintSnippets) {
      hintCosts.push(calculateHintCost(challenge, insertHintSnippets))
    }
    return (hintCosts.length === 0 ? '' : `"${hintCosts.join(',')}"`)
  }
*/

  //  In the flags section of the returned data we iterate through the result of string splitting by comma, and compute the hash of the single flag key + challenge name.
  //  Format expected is: challenge3,challenge description,category3,100,dynamic,visible,0,"flag1,flag2,flag3","tag1,tag2,tag3","hint1,hint2,hint3","{""initial"":100, ""minimum"":10, ""decay"":10}"
  //  If we provide a single key with no commas, we do not incapsulate the output in a "" pair.
  return new Promise((resolve, reject) => {
    try {
      const data = []
      for (const key in challenges) {
        if (Object.prototype.hasOwnProperty.call(challenges, key)) {
          const challenge = challenges[key]
          data.push(
            {
              name: challenge.name,
              description: `"${challenge.description.replaceAll('"', '""')} (Difficulty Level: ${challenge.difficulty})"`,
              category: challenge.category,
              value: calculateScore(challenge.difficulty),
              type: 'standard',
              state: 'visible',
              max_attempts: 0,
              flags: ctfKey.split(',').length === 1 ? hmacSha1(ctfKey, challenge.name) : `"${ctfKey.split(',').map(key => `${hmacSha1(key, challenge.name)}`).join(',')}"`,
              tags: challenge.tags ? `"${challenge.tags}"` : '',
              hints: insertChallengeHints(challenge),
              // hint_cost: insertChallengeHintCosts(challenge),
              type_data: ''
            }
          )
        }
      }
      resolve(data)
    } catch (error) {
      reject(new Error('Failed to generate challenge data! ' + error.message))
    }
  })
}

module.exports = createCtfdExport

1	/*
2	* Copyright (c) 2016-2022 Bjoern Kimminich & the OWASP Juice Shop contributors.
3	* SPDX-License-Identifier: MIT
4	*/
5
6	const Promise = require('bluebird')	18✔
7	const calculateScore = require('../calculateScore')	18✔
8	// const calculateHintCost = require('../calculateHintCost')
9	const hmacSha1 = require('../hmac')	18✔
10	const options = require('../options')	18✔
11
12	function createCtfdExport (challenges, { insertHints, insertHintUrls, insertHintSnippets, ctfKey, vulnSnippets }) {
13	function insertChallengeHints (challenge) {
14	const hints = []	1,060✔
15	if (challenge.hint && insertHints !== options.noTextHints) {	1,060✔
16	hints.push(challenge.hint.replaceAll('"', '""').replaceAll(',', '٬'))	636✔
17	}
18	if (challenge.hintUrl && insertHintUrls !== options.noHintUrls) {	1,060✔
19	hints.push(challenge.hintUrl)	636✔
20	}
21	if (vulnSnippets[challenge.key] && insertHintSnippets !== options.noHintSnippets) {	1,060✔
22	hints.push('<pre><code>' + vulnSnippets[challenge.key].replaceAll('"', '""').replaceAll(',', '٬') + '</code></pre>')	124✔
23	}
24	return (hints.length === 0 ? '' : `"${hints.join(',')}"`)	1,060✔
25	}
26
27	/*
28	function insertChallengeHintCosts (challenge) {
29	const hintCosts = []
30	if (challenge.hint && insertHints !== options.noTextHints) {
31	hintCosts.push(calculateHintCost(challenge, insertHints))
32	}
33	if (challenge.hintUrl && insertHintUrls !== options.noHintUrls) {
34	hintCosts.push(calculateHintCost(challenge, insertHintUrls))
35	}
36	if (vulnSnippets[challenge.key] && insertHintSnippets !== options.noHintSnippets) {
37	hintCosts.push(calculateHintCost(challenge, insertHintSnippets))
38	}
39	return (hintCosts.length === 0 ? '' : `"${hintCosts.join(',')}"`)
40	}
41	*/
42
43	// In the flags section of the returned data we iterate through the result of string splitting by comma, and compute the hash of the single flag key + challenge name.
44	// Format expected is: challenge3,challenge description,category3,100,dynamic,visible,0,"flag1,flag2,flag3","tag1,tag2,tag3","hint1,hint2,hint3","{""initial"":100, ""minimum"":10, ""decay"":10}"
45	// If we provide a single key with no commas, we do not incapsulate the output in a "" pair.
46	return new Promise((resolve, reject) => {	10✔
47	try {	10✔
48	const data = []	10✔
49	for (const key in challenges) {	10✔
50	if (Object.prototype.hasOwnProperty.call(challenges, key)) {	1,060!
51	const challenge = challenges[key]	1,060✔
52	data.push(	1,060✔
53	{
54	name: challenge.name,
55	description: `"${challenge.description.replaceAll('"', '""')} (Difficulty Level: ${challenge.difficulty})"`,
56	category: challenge.category,
57	value: calculateScore(challenge.difficulty),
58	type: 'standard',
59	state: 'visible',
60	max_attempts: 0,
NEW 61	flags: ctfKey.split(',').length === 1 ? hmacSha1(ctfKey, challenge.name) : `"${ctfKey.split(',').map(key => `${hmacSha1(key, challenge.name)}`).join(',')}"`,	×
62	tags: challenge.tags ? `"${challenge.tags}"` : '',	1,060✔
63	hints: insertChallengeHints(challenge),
64	// hint_cost: insertChallengeHintCosts(challenge),
65	type_data: ''
66	}
67	)
68	}
69	}
70	resolve(data)	10✔
71	} catch (error) {
72	reject(new Error('Failed to generate challenge data! ' + error.message))	×
73	}
74	})
75	}
76
77	module.exports = createCtfdExport	18✔

juice-shop / juice-shop-ctf / 8334978252

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous