feat: edit corpsync web challenge

Author: wajihhichri-cyber

challenges/web/CorpSync/challenge/app1/app.js

@@ -13,6 +13,7 @@ const {
   addUser,
   createReport,
   getReports,
+  getReportsByUser,
   getReportById,
   updateReportStatus,
   getSessionSecret,
@@ -101,11 +102,19 @@ app.post("/logout", requireAuth, (req, res) => {
 });
 
 app.get("/dashboard", requireAuth, async (req, res) => {
-  res.render("dashboard", { reports: await getReports() });
+  const { userId, role } = req.session.data;
+  const reports = ["reporter", "admin"].includes(role)
+    ? await getReports()
+    : await getReportsByUser(userId);
+  res.render("dashboard", { reports });
 });
 
 app.get("/reports", requireAuth, async (req, res) => {
-  res.render("reports", { reports: await getReports() });
+  const { userId, role } = req.session.data;
+  const reports = ["reporter", "admin"].includes(role)
+    ? await getReports()
+    : await getReportsByUser(userId);
+  res.render("reports", { reports });
 });
 
 app.get("/reports/new", requireAuth, (req, res) => res.render("report_new", { error: null }));
@@ -122,12 +131,20 @@ app.post("/reports/new", requireAuth, async (req, res) => {
 app.get("/reports/:id", requireAuth, async (req, res) => {
   const report = await getReportById(req.params.id);
   if (!report) return res.status(404).send("Report not found");
+  const { userId, role } = req.session.data;
+  if (!["reporter", "admin"].includes(role) && report.created_by !== userId) {
+    return res.status(403).render("forbidden", { user: req.session.data, sessionToken: res.locals.sessionToken });
+  }
   res.render("report_view", { report, message: null });
 });
 
 app.post("/reports/:id/flag", requireAuth, async (req, res) => {
   const report = await getReportById(req.params.id);
   if (!report) return res.status(404).send("Report not found");
+  const { userId, role } = req.session.data;
+  if (!["reporter", "admin"].includes(role) && report.created_by !== userId) {
+    return res.status(403).render("forbidden", { user: req.session.data, sessionToken: res.locals.sessionToken });
+  }
   await updateReportStatus(report.id, "In Review");
   fetch(BOT_URL, {
     method: "POST",

challenges/web/CorpSync/challenge/app1/db.js

@@ -101,6 +101,12 @@ const getReports = () =>
        FROM reports r JOIN users u ON r.created_by = u.id
        ORDER BY r.created_at DESC`);
 
+const getReportsByUser = (userId) =>
+  all(`SELECT r.*, u.username AS author
+       FROM reports r JOIN users u ON r.created_by = u.id
+       WHERE r.created_by = ?
+       ORDER BY r.created_at DESC`, [userId]);
+
 const getReportById = (id) =>
   get(`SELECT r.*, u.username AS author
        FROM reports r JOIN users u ON r.created_by = u.id
@@ -116,6 +122,7 @@ module.exports = {
   addUser,
   createReport,
   getReports,
+  getReportsByUser,
   getReportById,
   updateReportStatus,
 };

challenges/web/CorpSync/challenge/app1/views/forbidden.ejs

@@ -0,0 +1,21 @@
+<%- include('partials/header', { user, sessionToken }) %>
+<div style="display:flex;flex-direction:column;align-items:center;justify-content:center;min-height:60vh;text-align:center;gap:0">
+  <div style="width:72px;height:72px;border-radius:50%;background:var(--red-bg);border:1px solid var(--red-bd);display:grid;place-items:center;margin-bottom:24px">
+    <svg viewBox="0 0 16 16" fill="currentColor" style="width:32px;height:32px;color:var(--red)">
+      <path d="M8 1a2 2 0 012 2v4H6V3a2 2 0 012-2m3 6V3a3 3 0 00-6 0v4a2 2 0 00-2 2v5a2 2 0 002 2h6a2 2 0 002-2V9a2 2 0 00-2-2"/>
+    </svg>
+  </div>
+  <div style="font-size:64px;font-weight:800;color:var(--text);letter-spacing:-3px;line-height:1">403</div>
+  <div style="font-size:18px;font-weight:700;color:var(--text);margin-top:10px;margin-bottom:8px">Access Denied</div>
+  <div style="font-size:13px;color:var(--muted);max-width:340px;line-height:1.65;margin-bottom:28px">
+    You don't have permission to view this report.<br>Only the report's author can access it.
+  </div>
+  <div style="display:flex;gap:10px">
+    <a href="/dashboard" class="btn btn-primary">
+      <svg viewBox="0 0 16 16" fill="currentColor"><path d="M1 2.5A1.5 1.5 0 012.5 1h3A1.5 1.5 0 017 2.5v3A1.5 1.5 0 015.5 7h-3A1.5 1.5 0 011 5.5zm7.5 0A1.5 1.5 0 0110 1h3a1.5 1.5 0 011.5 1.5v3A1.5 1.5 0 0113 7h-3a1.5 1.5 0 01-1.5-1.5zm-7.5 7A1.5 1.5 0 012.5 8h3A1.5 1.5 0 017 9.5v3A1.5 1.5 0 015.5 14h-3A1.5 1.5 0 011 12.5zm7.5 0A1.5 1.5 0 0110 8h3a1.5 1.5 0 011.5 1.5v3a1.5 1.5 0 01-1.5 1.5h-3a1.5 1.5 0 01-1.5-1.5z"/></svg>
+      Dashboard
+    </a>
+    <a href="/reports" class="btn btn-outline">My Reports</a>
+  </div>
+</div>
+<%- include('partials/footer') %>

challenges/web/CorpSync/challenge/app1/views/reports.ejs

@@ -34,9 +34,11 @@
         <td><span class="badge <%= bc(r.status) %>"><%= r.status %></span></td>
         <td style="color:var(--subtle);font-size:12px"><%= new Date(r.created_at).toLocaleDateString('en-GB', {day:'2-digit',month:'short',year:'numeric'}) %></td>
         <td>
+          <% if (['reporter','admin'].includes(user.role) || r.created_by === user.userId) { %>
           <form method="POST" action="/reports/<%= r.id %>/flag">
             <button type="submit" class="btn btn-outline btn-sm">Flag</button>
           </form>
+          <% } %>
         </td>
       </tr>
       <% }) %>

challenges/web/CorpSync/challenge/bot/bot.js

@@ -35,8 +35,7 @@ async function visit(browser, url) {
 }
 
 async function main() {
-  // Chrome has its own DNS resolver that doesn't use Docker's embedded DNS.
-  // Pre-resolve the app1 hostname with Node and pass it to Chrome via --host-resolver-rules.
+  
   const appHostname = new URL(APP1_URL).hostname;
   let resolverRule = "";
   try {