search

dichotomy / scorebot

Scoring Engine for CTF competitions
46 stars 22 forks source link

Using Service Content #53

Open dookgit opened 4 years ago

dookgit commented 4 years ago

Hi folks. Not an issue, more a question as to how to use a function.

I've managed to get Scorebot up and running OK, and have the Monitor running too. So can add a host, and monitor a service and it works in terms of monitoring if it's up/down.

I know theres the Service Content on the Scorebot, and i'm wondering how that works?. So i know i create a Service Content which is linked to a service. Do you have an example of a check?

So like if i'm monitoring a basic web page on port 80. What would a Service Content example be? e.g Would it need to contain the GET response? Or would plain text work?

Many thanks in advance for all your effort on Scorebot. I'm hoping to use it on a CTF in Australia soon. Cheers

dookgit commented 4 years ago

Hey folks. Just checking in, wondering if you're able to give any guidance on how todo a service content check?

Cheers

iDigitalFlame commented 4 years ago

@dichotomy Ping? This seems to be related to the H&W checker

h4sh5 commented 4 years ago

I have successfully inputted a JSON string into "Change Service Content" that doesn't crash:

{
    "urls":
    [
        {
            "keywords": ["Hello","Wordpress"],
            "size": 990,
            "url": "/index.html"
        }
    ]
}

I used the content type text/html, but currently it looks like it's not really checking anything (the content should mismatch but passes.) I am investigating Monitors/WebClient.py for this behaviour.