Release 1.1.0

New feature release!
You can now add ranges of IPs that are allowed to connect to your challenges.
This can be useful for private testing.

Use kctf cluster set-src-ip-ranges to configure the list.

Release 1.0.8

A bugfix to stop overwriting the security context of the challenge container if specified by the challenge author.

Release 1.0.7

Added an option to block all same-site cross-origin requests to the xss-bot template.
This will help prevent unintended solutions if two web challenges are hosted on the same registered domain (e.g. a.foo.com and b.foo.com)

Release 1.0.6

Fix issue with setpriv if the kernel has a different number of capablities then the OS.

Release 1.0.5

Fix issues with certificate generation

Release 1.0.4

Bugfix release: the pow would endless loop when the connection was closed without receiving a solution.

Release 1.0.3

This release fixes a bug where all challenges would use the same pow config.

Release 1.0.2

Changes:

• the pwn template uses a Makefile now instead of building in docker. This is to avoid situations when you want to redeploy a challenge during a CTF and the binary gets rebuild and becomes out of sync with what you handed out to the players.
• the web template now has an example on how to use gcsfuse for stateful applications

Release 1.0.1

Bugfix:

• ssh to correct challenge (before, debug ssh would always ssh to the newest pod of any challenge)

Changes:

• debug logs: print logs from all pods & add a --tail 50 parameter to control how many lines to print
• proof-of-work: modify the pow difficulty so that powDifficultySeconds is roughly seconds

Release 1.0.0

First stable release