m0rph3us1987 932cdd8a3a 1. Fixed: Broken Authentication (replaced static tokens with signed JWT-like tokens and persistent secret). ...

2. Fixed: Default Admin Security (the admin:admin account is now disabled once another administrator is created).
   3. Fixed: Information Disclosure (sensitive team data is now filtered out for non-admins).
   4. Fixed: Denial of Service (added type-safe password checks and error handling for hashing functions).
   5. Fixed: SQL Injection (implemented SCHEMA_WHITELIST for database restore validation).
   6. Fixed: Path Traversal (sanitized filenames for administrative file uploads).
   7. Preserved: Predictable File URLs (kept as an intentional vulnerability for CTF participants).

2026-02-28 14:26:03 +01:00

services

FIX 2 ^^

2026-02-05 23:18:26 +01:00

.dockerignore

initial commit

2026-01-07 13:27:11 +01:00

.gitignore

initial commit

2026-01-07 13:27:11 +01:00

Admin.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

App.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

Auth.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

Blog.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

Challenges.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

constants.ts

Made app more modular.

2026-01-21 18:59:14 +01:00

CTFContext.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

docker-compose.yml

Fixed permissions in docker-compose.yml

2026-01-21 19:24:10 +01:00

Dockerfile

initial commit

2026-01-07 13:27:11 +01:00

Home.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

index.html

No challenges are returned when event is not started.

2026-02-28 01:32:18 +01:00

index.tsx

initial commit

2026-01-07 13:27:11 +01:00

metadata.json

Made app more modular.

2026-01-21 18:59:14 +01:00

package-lock.json

initial commit

2026-01-07 13:27:11 +01:00

package.json

Made app more modular.

2026-01-21 18:59:14 +01:00

Scoreboard.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

server.js

1. Fixed: Broken Authentication (replaced static tokens with signed JWT-like tokens and persistent secret).

2026-02-28 14:26:03 +01:00

tsconfig.json

initial commit

2026-01-07 13:27:11 +01:00

types.ts

Made app more modular.

2026-01-21 18:59:14 +01:00

UIComponents.tsx

Made app more modular.

2026-01-21 18:59:14 +01:00

vite.config.ts

initial commit

2026-01-07 13:27:11 +01:00

Description

A vibe coded CTF competition platform coded for the HIP7

348 KiB

Languages

TypeScript 81.7%

JavaScript 16.3%

HTML 1.3%

Dockerfile 0.7%