C0deH4cker / PwnableHarness

Manage building and deploying exploitation challenges with ease
MIT License
57 stars 4 forks source link

Add a password protection feature for pre-release challenges #8

Closed C0deH4cker closed 2 years ago

C0deH4cker commented 2 years ago

When challenges are being developed and play-tested, it's useful to spin them up on a public server so other people can try them out. To avoid people from finding a challenge early with port scanning, it would be nice to allow setting up a plaintext password that must be entered before the challenge binary executes. This is sufficient to deter random port scanners who find the service, and we don't need to worry about threat actors in privileged network positions.