Structure

In this page you will go through the structure and most important features of this repository. It is ideal that you become familiar with its structure before you start trying to post solutions, as it is big and you might feel lost.

Solutions are stored in the following folders of the repository:

Code

Description

Folder to store programming challenges.

Structure

<site> (directory)

└── <challenge-id> (directory)

├── <login-gitlab.ext> (solution file)

└── <login-gitlab.yml> (YAML file)

Example

• Codeabbey
  • 135
    • ludsrill.exs
    • ludsrill.yml

Hack

Description

Folder to store ctf-hacking challenges.

Structure

<site> (directory)

└── <challenge-id> (directory)

├── <login-gitlab.feature> (solution file)

├── <login-gitlab.yml> (YAML file)

└── <login-gitlab> (evidence folder) (optionally)

├── <evidence-img.png> (evidence img in png) (optionally)

└── <login-gitlab.ext> (script/exploit used) (optionally)

Example

• 247ctf
  • hidden-painting
    • sullenestd1.feature
    • sullenestd1.yml
    • esullenestd1
      • esullenestd1.py

VbD

Description

Folder to store vulnerable vbd-hacking challenges.

Structure

<name-of-the-vulnerable-machine> (directory)

└── <cwe-code>-<exploit-name> (directory)

├── <login-gitlab.feature> (solution file)

├── <login-gitlab.yml> (YAML file)

└── <login-gitlab> (evidence folder) (optionally)

├── <evidence-img.png> (evidence img in png) (optionally)

└── <login-gitlab.ext> (script/exploit used) (optionally)

Example

• acuart
  • 0020-impr-data-val-cart
    • rafa1894.feature
    • rafa1894.yml
    • rafa1894
      • rafa1894.png

1.1. Rules

• The naming of all files and folders, must not exceed 35 characters, written in lowercase, without any special characters and in case a white space needed use a - (dash) to replace it.

• Vulnerability folders in vbd have the following naming structure:

  • <cwe-code>-<exploit-name> where:
  • <cwe-code> is the four digit code of the vulnerability
  • <exploit-name> is the name of the vulnerability
  • Example 0384-smgmt-cookies-httponly

1.2. Files

Some of the folders described in the structure contain special files:

• LINK.lst: Contains the challenge URL. This file must only have one line with the challenge link and it must give an HTTP 200 response when visiting it (No redirection).

• DATA.lst: Contains the test cases with which the challenge was validated. This file should only contain test cases that are immediately processable by any solution file.

• OTHERS.lst: It contains the links to the external solutions found on the Internet for that challenge. They must not be read or used as a reference to solve the challenge. This file allows an automatic script to perform a similarity analysis with the challenges sent by the candidates.