-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathdicevault.tar
207 lines (164 loc) · 20 KB
/
dicevault.tar
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
dicevault/ 0000755 0001750 0001750 00000000000 14125041270 011200 5 ustar arx arx dicevault/app.py 0000644 0001750 0001750 00000002360 14177204551 012345 0 ustar arx arx #!/usr/bin/env python3
from flask import Flask
from flask import render_template
from flask import request
from flask_caching import Cache
app = Flask(__name__)
cache = Cache(config={'CACHE_TYPE': 'FileSystemCache', 'CACHE_DIR':'/tmp/vault', 'CACHE_DEFAULT_TIMEOUT': 300})
cache.init_app(app)
@app.after_request
def add_headers(response):
response.headers['Content-Security-Policy'] = "frame-ancestors 'none';"
response.headers['Cache-Control'] = 'no-store'
return response
@app.route("/<path:vault_key>", methods=["GET", "POST"])
def vault(vault_key):
parts = list(filter(lambda s: s.isdigit(), vault_key.split("/")))
level = len(parts)
if level > 15:
return "Too deep", 404
if not cache.get("vault"):
cache.set("vault", {})
main_vault = cache.get("vault")
c = main_vault
for v in parts:
c = c.setdefault(v, {})
values = c.setdefault("values", [])
if level > 8 and request.method == "POST":
value = request.form.get("value")
value = value[0:50]
values.append(value)
cache.set("vault", main_vault)
return render_template("vault.html", values = values, level = level), 404
@app.get("/")
def main():
return render_template("main.html"), 404
dicevault/templates/ 0000755 0001750 0001750 00000000000 14177304445 013213 5 ustar arx arx dicevault/templates/layout.html 0000644 0001750 0001750 00000005053 14177304445 015421 0 ustar arx arx <!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/figuration.min.css"
integrity="sha384-+jx/oHgp600cLGTa4nBzk/fhhD+UoUW/2BzjKaGn+OIOri6bvkSkjzccD5zlkLk3" crossorigin="anonymous">
{% block head %}
{% endblock %}
<style>
.jumbotron {
padding: 2rem 1rem;
text-align: center;
}
.btn.vault {
max-width: 50px;
}
.vault-menu {
flex-wrap: wrap;
}
</style>
</head>
<body>
<main class="container">
<div class="jumbotron ">
<h2>DiceVault
<svg xmlns="http://www.w3.org/2000/svg" viewBox="20 20 35 35" style="grid-column: span 3; height: 1.5em;">
<path fill="#a0041e" d="M23.5 30.6v.1zm13 11.1a2 2 0 01-.4-.2l-12-9.6c-.4-.4-.6-.8-.6-1.2V43c0 2 1 2.5 1 2.5l11.7 9 .7.5-.4-.7zm-8.8.4c-1 0-2-1-2.3-2.2-.3-1.3.3-2.3 1.3-2.3s2 1 2.3 2.3c.3 1.2-.3 2.2-1.3 2.2zm5.6 7.5c-1 0-2-1-2.3-2.2-.3-1.3.3-2.3 1.3-2.3s2 1 2.3 2.3c.3 1.2-.3 2.2-1.3 2.2z"></path>
<path fill="#dd2e44" d="M51 31.8l-12.2 9.7a1.9 1.9 0 01-.3.2v12.6l-.4.7.7-.4 11.6-9.1s1.1-.7 1.1-2.7V30.7c0 .4-.2.8-.6 1zm-7.5 16.7c-.3 1.1-1.1 2-2 2-.8 0-1.3-.9-1-2 .2-1.1 1-2 1.9-2s1.3.9 1 2zm3.5-5.3c-.2 1.2-1.2 2.1-2 2.1-1 0-1.4-.9-1.2-2 .3-1.2 1.2-2.2 2-2.2 1 0 1.5 1 1.2 2.1zm3-5c-.2 1-1 2-2 2-.8 0-1.3-1-1-2 .2-1.2 1-2.1 2-2.1.8 0 1.3 1 1 2zm1.5-7.6z"></path>
<path fill="#ea596e" stroke="#ea596e" stroke-width=".1" d="M51 29.5l-12.2-9.4c-.8-.6-2-.6-2.8 0l-12 9.5a1.4 1.4 0 00-.5 1v.1c0 .4.2.8.6 1.1l12 9.7.4.2v12.4c0 .2 0 .4.2.6.1.3.5.5.8.5.3 0 .6-.2.8-.5a1.1 1.1 0 00.2-.6V41.7a1.9 1.9 0 00.3-.2L51 31.8c.4-.3.6-.7.6-1.1 0 0 0 0 0 0 0-.5-.2-.9-.6-1.2zm-13-1.2c1.6 0 3 1 3 2.3 0 1.3-1.4 2.3-3 2.3s-3-1-3-2.3c0-1.3 1.4-2.3 3-2.3z"></path>
</svg>
</h2>
<div class="btn-group btn-group-xsmall vault-menu" role="group" aria-label="Vaults">
<a type="button" href="../" class="btn">Up</a>
<a href="./1/" type="button" class="btn vault vault-1">⚀</a><a href="./2/" type="button" class="btn vault vault-2">⚁</a><a href="./3/" type="button" class="btn vault vault-3">⚂</a><a href="./4/" type="button" class="btn vault vault-4">⚃</a><a href="./5/" type="button" class="btn vault vault-5">⚄</a><a href="./6/" type="button" class="btn vault vault-6">⚅</a>
</div>
<a type="button" href="/" class="btn btn-xsmall btn-warning">Report an issue</a>
</div>
{% block html %}
{% endblock %}
</main>
</body>
</html>
dicevault/templates/vault.html 0000644 0001750 0001750 00000001107 14125041270 015216 0 ustar arx arx {% extends "layout.html" %}
{% block html %}
<div class="value">
<h3>In this vault</h3>
{% for value in values %}
<p>{{ value }}</p>
{% endfor %}
</div>
{% if level > 8 %}
<form method="POST">
<div class="input-group mb-1">
<span class="input-group-text">Add something to this vault</span>
<input type="text" id="value" name="value" maxlength="50" class="form-control" aria-label="Enter value">
</div>
<div class="input-group mb-1">
<input id="submit" class="btn btn-primary" type="submit" value="Submit" />
</div>
</form>
{% endif %}
{% endblock %} dicevault/templates/main.html 0000644 0001750 0001750 00000000657 14177203554 015034 0 ustar arx arx {% extends "layout.html" %}
{% block html %}
<div class="alert alert-primary" role="alert">
<p>
Welcome to dicevault! Who needs logins or encryption, all you need is more buckets!
Navigate down to a secret path and store your data at the bottom.
</p>
<p>
<small>If you find something that does not work, please let me know <a href="https://admin-bot.mc.ax/dicevault">here</a></small>
</p>
</div>
{% endblock %} dicevault/Dockerfile 0000644 0001750 0001750 00000000333 14125041270 013171 0 ustar arx arx FROM python:3.8-slim-buster
WORKDIR /app
COPY requirements.txt requirements.txt
RUN pip3 install -r requirements.txt
COPY app.py .
COPY templates ./templates
CMD [ "python3", "-m" , "flask", "run", "--host=0.0.0.0"] dicevault/requirements.txt 0000644 0001750 0001750 00000000042 14177153356 014500 0 ustar arx arx Flask==2.0.2
Flask-Caching==1.10.1 admin-bot.js 0000644 0001750 0001750 00000003451 14177434651 011453 0 ustar arx arx import FLAG from './flag.txt'
import FLAGPATH from './flagpath.txt'
// secret flag vault, same across runs of admin bot
const flagVault = FLAGPATH.split("/").map(x=>parseInt(x))
async function clickVault(page, i) {
const vault = `a.vault-${i}`;
const elem = await page.waitForSelector(vault, { visible: true })
await Promise.all([page.waitForNavigation(), elem.click()])
}
async function navigateVault(page, path) {
for (let i = 0; i < path.length; i++) {
await clickVault(page, path[i])
}
}
function sleep(time) {
return new Promise(resolve => {
setTimeout(resolve, time)
})
}
export default {
id: 'dicevault',
name: 'dicevault',
urlRegex: /.*/,
timeout: 60000,
handler: async (url, ctx) => {
/*
this handler is run with the provided url and a new puppeteer incognito latest-chromium browser context
whenever someone submits a url to the admin bot
*/
// go to the vault and put the flag there
let page = await ctx.newPage()
await page.goto('https://dicevault.mc.ax/', { timeout: 3000, waitUntil: 'domcontentloaded' })
await navigateVault(page, flagVault)
await page.type("#value", FLAG)
await Promise.all([page.waitForNavigation(), page.click('#submit')])
await page.close()
// if we see a dicevault page, navigate to our vault :)
ctx.on('targetcreated', async (target) => {
if (target.type() === "page" && /^https:\/\/dicevault\.mc\.ax\/$/.test(target.url())) {
await navigateVault(await target.page(), flagVault)
}
})
// go to the provided url
page = await ctx.newPage()
await page.goto(url, { timeout: 5000, waitUntil: 'domcontentloaded' })
await sleep(60000)
}
}