DedsecCTF is a project made for the CyberSecurity PAD project 2022-2023. The project is made with the Django-framework.
There are four challenges playable on the CTF website. They are all playable locally only, three of the challenges are in docker seperate from the website.
Challenges in docker: Sqlinjection, webexploit en bruteforce. Challenge not in docker but on the website: decode challenge.
Docker and docker-compose
To play the challenges and run the website you need docker. Here is a link to the official page of docker with a step by step tutorial on how to install docker: https://docs.docker.com/engine/install/.
-
clone this git repository. (use: VSCODE)
-
click on code then on HTTPS, and copy the address.
-
Go to VSCODE paste the address in the bar that appears after you select clone this repository and click enter.
-
next you need to select a location to clone the repository to, navigate to Desktop. Click new folder, and give the new folder a name. Then click select as repository destination.
-
next you will get a notifaction, click on open.
-
after you opened the repository you need to open up a terminal (it can take sometime before you can do this).
-
type the following command in the terminal:
cd Django -
type the following command in the terminal:
cd pad -
then type the following command in the terminal:
docker-compose build(this can take some time) -
then type the following command in the terminal:
docker-compose up
Now if you navigate to docker desktop you should see a container this is the container where the main website is located.
You can navigate to localhost:8000 on your preffered browser to visit the website as long as the container is running.
To clone the challenges you need to clone the other 3 branches.
Brute_force challenge
- Type the following command in the same terminal:
git checkout brute_force - Now open a new terminal and type the following commands:
docker-compose build - And type the following command:
docker-compose up
Now if you navigate to docker desktop you should see a container this is the container where the brute force challenge is located. You can navigate to localhost:4000 to visit the challenge.
Webexploit challenge
- type the following command in the same terminal:
git checkout challenge2 - Now open a new terminal and type the following commands:
cd webexploit - Now type the following command:
docker-compose build - And type the following command:
docker-compose up
Now if you navigate to docker desktop you should see a container this is the container where the webexploit challenge is located. You can navigate to localhost:8002 to visit the challenge.
Sqlinjection challenge
- type the following command in the same terminal:
git checkout sqlinjection_challenge - Now open a new terminal and type the following commands:
cd sql - Now type the following command:
docker-compose build - And type the following command:
docker-compose up
Now if you navigate to docker desktop you should see a container this is the container where the sqlinjection challenge is located. You can navigate to localhost:8001 to visit the challenge.
Mete Basoda Bruno Blaauboer Jerre Hilgeman Hicham Almakroudi