-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
add dock and samples #18
base: master
Are you sure you want to change the base?
Conversation
#### How to: | ||
### Quick Start | ||
#### Examples | ||
* [Minimal working example](https://github.com/HackerDom/Gornilo/blob/master/gornilo/examples/checker.py) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Use relative pathes instead of absolute:
[Minimal working example](examples/checker.py)
Same for abstract_checker.py
Checker has similliar functionality to e2e tests. It has three most important methods: | ||
* `CHECK` that service works correct. | ||
* `PUT` flag to service | ||
* `GET` flag from service, and check that falg is correct |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo: falg -> flag
``` | ||
__CHECK__ - check all service functionality | ||
|
||
__PUT_1__ - put flag of firts type |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo: firts -> first
* `OK` - method complete without problems | ||
* `MUMBLE` - service response incorrect | ||
* `DOWN` - failed connect to a service | ||
* `CHECKER_ERROR` - exceptions in checker, or brocken checker logic |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo: brocken -> broken
Flag rate is an option adjusting how many flags of this type are put into the service per round. In general, various flag types are implemented for various vulnerabilities that vary in complexity. With __flag rate__ you can put more flag to difficult vuln and less to easy. | ||
|
||
#### Flag id | ||
Flag id-all data you need to get the flag, for example username+password. Passed from `PUT` to `GET` methods. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
...id - all...
Or contains
:)
|
||
#check flag | ||
if actual["gringotts_pass_phrase"] != request.flag: | ||
return Verdict.CORRUPT(f"Expected falg {request.flag}, but actual {actual['secret']}") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo: falg -> flag
No description provided.