Open sirdarckcat opened 4 years ago
It's highly likely that someone running dirbuster on a .php file will cause issues, so we should add pow to web challenges too.
this can be done by wrapping the call to nsjail: https://github.com/google/kctf/blob/00ca1395f0e2492d6b7710c9db97bfb2ecf01bc5/samples/apache-php/challenge/files/cgi-bin/nsjail-php-cgi#L3
so that it checks:
/.__kctf__/pow?continue=$path
and add /.__kctf__/pow that:
/.__kctf__/pow
?continue
cookies might be annoying, though.. perhaps we can drop this from Beta while we look at what people end up using in practice
It's highly likely that someone running dirbuster on a .php file will cause issues, so we should add pow to web challenges too.
this can be done by wrapping the call to nsjail: https://github.com/google/kctf/blob/00ca1395f0e2492d6b7710c9db97bfb2ecf01bc5/samples/apache-php/challenge/files/cgi-bin/nsjail-php-cgi#L3
so that it checks:
/.__kctf__/pow?continue=$path
and add
/.__kctf__/pow
that:?continue
param