2009-09-02 10:15:54 -06:00
|
|
|
#! /usr/bin/env python3
|
|
|
|
|
|
|
|
|
|
import cgitb; cgitb.enable()
|
|
|
|
|
import cgi
|
|
|
|
|
import os
|
|
|
|
|
import fcntl
|
|
|
|
|
import re
|
|
|
|
|
import sys
|
|
|
|
|
import pointscli
|
|
|
|
|
import teams
|
2009-09-25 13:27:37 -06:00
|
|
|
import http.cookies
|
2009-09-02 14:25:31 -06:00
|
|
|
from urllib.parse import quote, unquote
|
|
|
|
|
|
|
|
|
|
##
|
|
|
|
|
## This allows you to edit the URL and work on puzzles that haven't been
|
|
|
|
|
## unlocked yet. For now I think that's an okay vulnerability. It's a
|
|
|
|
|
## hacking contest, after all.
|
|
|
|
|
##
|
2009-09-02 10:15:54 -06:00
|
|
|
|
|
|
|
|
cat_re = re.compile(r'^[a-z]+$')
|
|
|
|
|
points_re = re.compile(r'^[0-9]+$')
|
|
|
|
|
|
|
|
|
|
def dbg(*vals):
|
|
|
|
|
print('Content-type: text/plain\n\n')
|
|
|
|
|
print(*vals)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
points_by_cat = {}
|
|
|
|
|
points_by_team = {}
|
|
|
|
|
try:
|
2009-09-25 13:27:37 -06:00
|
|
|
for line in open('/var/lib/ctf/puzzler.dat'):
|
2009-09-02 14:25:31 -06:00
|
|
|
cat, team, pts = [unquote(v) for v in line.strip().split('\t')]
|
2009-09-02 10:15:54 -06:00
|
|
|
pts = int(pts)
|
|
|
|
|
points_by_cat[cat] = max(points_by_cat.get(cat, 0), pts)
|
|
|
|
|
points_by_team.setdefault((team, cat), set()).add(pts)
|
|
|
|
|
except IOError:
|
|
|
|
|
pass
|
|
|
|
|
|
|
|
|
|
|
2009-09-25 13:27:37 -06:00
|
|
|
c = http.cookies.SimpleCookie(os.environ.get('HTTP_COOKIE', ''))
|
|
|
|
|
try:
|
|
|
|
|
team = c['team'].value
|
|
|
|
|
passwd = c['passwd'].value
|
|
|
|
|
except KeyError:
|
|
|
|
|
team, passwd = None, None
|
2009-09-02 10:15:54 -06:00
|
|
|
|
2009-09-25 13:27:37 -06:00
|
|
|
f = cgi.FieldStorage()
|
2009-09-02 10:15:54 -06:00
|
|
|
cat = f.getfirst('c')
|
|
|
|
|
points = f.getfirst('p')
|
2009-09-25 13:27:37 -06:00
|
|
|
team = f.getfirst('t', team)
|
|
|
|
|
passwd = f.getfirst('w', passwd)
|
2009-09-02 10:15:54 -06:00
|
|
|
key = f.getfirst('k')
|
|
|
|
|
|
|
|
|
|
verboten = ['key', 'index.html']
|
|
|
|
|
|
|
|
|
|
def start_html(title):
|
2009-09-25 13:27:37 -06:00
|
|
|
print('Content-type: text/html')
|
|
|
|
|
if team or passwd:
|
|
|
|
|
c = http.cookies.SimpleCookie()
|
|
|
|
|
if team:
|
|
|
|
|
c['team'] = team
|
|
|
|
|
if passwd:
|
|
|
|
|
c['passwd'] = passwd
|
|
|
|
|
print(c)
|
|
|
|
|
print()
|
|
|
|
|
print('''<?xml version="1.0" encoding="UTF-8"?>
|
2009-09-02 10:15:54 -06:00
|
|
|
<!DOCTYPE html PUBLIC
|
|
|
|
|
"-//W3C//DTD XHTML 1.0 Strict//EN"
|
|
|
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
|
|
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
|
|
|
<head>
|
|
|
|
|
<title>%s</title>
|
|
|
|
|
<link rel="stylesheet" href="ctf.css" type="text/css" />
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<h1>%s</h1>
|
|
|
|
|
''' % (title, title))
|
|
|
|
|
|
|
|
|
|
def end_html():
|
|
|
|
|
print('</body></html>')
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def safe_join(*args):
|
|
|
|
|
safe = []
|
|
|
|
|
for a in args:
|
|
|
|
|
if not a:
|
|
|
|
|
return None
|
|
|
|
|
else:
|
|
|
|
|
a = a.replace('..', '')
|
|
|
|
|
a = a.replace('/', '')
|
|
|
|
|
safe.append(a)
|
|
|
|
|
ret = '/'.join(safe)
|
|
|
|
|
if os.path.exists(ret):
|
|
|
|
|
return ret
|
|
|
|
|
|
|
|
|
|
def dump_file(fn):
|
|
|
|
|
f = open(fn, 'rb')
|
|
|
|
|
while True:
|
|
|
|
|
d = f.read(4096)
|
|
|
|
|
if not d:
|
|
|
|
|
break
|
|
|
|
|
sys.stdout.buffer.write(d)
|
|
|
|
|
|
|
|
|
|
def show_cats():
|
|
|
|
|
start_html('Categories')
|
|
|
|
|
print('<ul>')
|
|
|
|
|
for p in sorted(os.listdir('puzzles')):
|
|
|
|
|
print('<li><a href="puzzler.cgi?c=%s">%s</a></li>' % (p, p))
|
|
|
|
|
print('</ul>')
|
|
|
|
|
end_html()
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def show_puzzles(cat, cat_dir):
|
|
|
|
|
start_html('Open in %s' % cat)
|
|
|
|
|
opened = points_by_cat.get(cat, 0)
|
|
|
|
|
puzzles = sorted([int(v) for v in os.listdir(cat_dir)])
|
|
|
|
|
if puzzles:
|
|
|
|
|
print('<ul>')
|
|
|
|
|
for p in puzzles:
|
2009-09-02 14:25:31 -06:00
|
|
|
print('<li><a href="puzzler.cgi?c=%s&p=%d">%d</a></li>' % (cat, p, p))
|
|
|
|
|
if p > opened:
|
|
|
|
|
break
|
2009-09-02 10:15:54 -06:00
|
|
|
print('</ul>')
|
|
|
|
|
else:
|
|
|
|
|
print('<p>None (someone is slacking)</p>')
|
|
|
|
|
end_html()
|
|
|
|
|
|
2009-09-25 13:27:37 -06:00
|
|
|
def show_puzzle(cat, points, points_dir, team='', passwd=''):
|
2009-09-02 10:15:54 -06:00
|
|
|
# Show puzzle in cat for points
|
2009-09-25 13:27:37 -06:00
|
|
|
start_html('%s for %s points' % (cat, points))
|
2009-09-02 10:15:54 -06:00
|
|
|
fn = os.path.join(points_dir, 'index.html')
|
|
|
|
|
if os.path.exists(fn):
|
|
|
|
|
print('<div class="readme">')
|
|
|
|
|
dump_file(fn)
|
|
|
|
|
print('</div>')
|
|
|
|
|
print('<ul>')
|
|
|
|
|
for fn in sorted(os.listdir(points_dir)):
|
|
|
|
|
if fn.endswith('~') or fn.startswith('.') or fn in verboten:
|
|
|
|
|
continue
|
|
|
|
|
print('<li><a href="puzzler.cgi?c=%s&p=%s&f=%s">%s</a></li>' % (cat, points, fn, fn))
|
|
|
|
|
print('</ul>')
|
|
|
|
|
print('<form action="puzzler.cgi" method="post">')
|
|
|
|
|
print('<input type="hidden" name="c" value="%s" />' % cat)
|
|
|
|
|
print('<input type="hidden" name="p" value="%s" />' % points)
|
2009-09-02 15:27:56 -06:00
|
|
|
print('Team: <input name="t" value="%s" /><br />' % (team or ''))
|
|
|
|
|
print('Password: <input type="password" name="w" value="%s" /><br />' % (passwd or ''))
|
2009-09-02 10:15:54 -06:00
|
|
|
print('Key: <input name="k" /><br />')
|
|
|
|
|
print('<input type="submit" />')
|
|
|
|
|
print('</form>')
|
|
|
|
|
end_html()
|
|
|
|
|
|
|
|
|
|
def win(cat, team, points):
|
|
|
|
|
start_html('Winner!')
|
|
|
|
|
points = int(points)
|
2009-09-02 14:25:31 -06:00
|
|
|
f = open('puzzler.dat', 'a')
|
2009-09-25 13:27:37 -06:00
|
|
|
pointscli.submit(cat, team, points)
|
2009-09-02 14:25:31 -06:00
|
|
|
fcntl.lockf(f, fcntl.LOCK_EX)
|
|
|
|
|
f.write('%s\t%s\t%d\n' % (quote(cat), quote(team), points))
|
2009-09-25 13:27:37 -06:00
|
|
|
print('<p>%d points for %s.</p>' % (points, team))
|
|
|
|
|
print('<p>Back to <a href="puzzler.cgi?c=%s">%s</a>.</p>' % (cat, cat))
|
2009-09-02 10:15:54 -06:00
|
|
|
end_html()
|
|
|
|
|
|
|
|
|
|
def main():
|
|
|
|
|
cat_dir = safe_join('puzzles', cat)
|
|
|
|
|
points_dir = safe_join('puzzles', cat, points)
|
|
|
|
|
|
|
|
|
|
if not cat_dir:
|
|
|
|
|
# Show categories
|
|
|
|
|
show_cats()
|
|
|
|
|
elif not points_dir:
|
|
|
|
|
# Show available puzzles in category
|
|
|
|
|
show_puzzles(cat, cat_dir)
|
|
|
|
|
elif not (team and passwd and key):
|
|
|
|
|
fn = f.getfirst('f')
|
|
|
|
|
if fn in verboten:
|
|
|
|
|
fn = None
|
|
|
|
|
fn = safe_join('puzzles', cat, points, fn)
|
|
|
|
|
if fn:
|
|
|
|
|
# Provide a file from this directory
|
|
|
|
|
print('Content-type: application/octet-stream')
|
|
|
|
|
print()
|
|
|
|
|
dump_file(fn)
|
|
|
|
|
else:
|
2009-09-02 15:27:56 -06:00
|
|
|
show_puzzle(cat, points, points_dir, team, passwd)
|
2009-09-02 10:15:54 -06:00
|
|
|
else:
|
2009-09-25 13:27:37 -06:00
|
|
|
try:
|
|
|
|
|
thekey = open('%s/key' % points_dir, encoding='utf-8').read().strip()
|
|
|
|
|
except IOError:
|
|
|
|
|
# If there's no key, this can never be solved.
|
|
|
|
|
thekey = False
|
2009-09-02 10:15:54 -06:00
|
|
|
if not teams.chkpasswd(team, passwd):
|
|
|
|
|
start_html('Wrong password')
|
|
|
|
|
end_html()
|
|
|
|
|
elif key != thekey:
|
2009-09-25 13:27:37 -06:00
|
|
|
show_puzzle(cat, points, points_dir, team, passwd)
|
|
|
|
|
elif int(points) in points_by_team.get((team, cat), set()):
|
2009-09-02 10:15:54 -06:00
|
|
|
start_html('Greedy greedy')
|
|
|
|
|
end_html()
|
|
|
|
|
else:
|
|
|
|
|
win(cat, team, points)
|
|
|
|
|
|
|
|
|
|
main()
|
2009-09-25 13:27:37 -06:00
|
|
|
|
|
|
|
|
# Local Variables:
|
|
|
|
|
# mode: python
|
|
|
|
|
# End:
|
