Skip to content

Latest commit

 

History

History
executable file
·
149 lines (104 loc) · 4.77 KB

README.md

File metadata and controls

executable file
·
149 lines (104 loc) · 4.77 KB

CTFNote logo

CTFNote

Introduction

CTFNote is a collaborative tool aiming to help CTF teams to organise their work.

Screenshot of the task list

Installation

Before starting, make sure to fill in the information in the .env file.

Then you can start it with docker-compose. The default configuration makes it super easy to start a new instance!

$ docker-compose up -d

The instance will spawn a web server on port 127.0.0.1:8080. The first account created will have administrative privileges.

Please use nginx to make it available over HTTPS.

Enable HTTPS with nginx

It is assumed that you want to serve CTFNote over HTTPS.

An example configuration for nginx on the host looks like this:

server {
        server_name ctfnote.my.domain;

        root /var/www/html;
        index index.html;

        location / {
                proxy_pass http://127.0.0.1:8080/;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $http_connection;
                proxy_set_header Host $http_host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
                add_header Pragma "no-cache";
        }
}

Edit the docker-compose.yml file to make sure CTFNote only listens on localhost:

-      - 8080:80
+      - 127.0.0.1:8080:80

Edit the .env file to instruct the pad to use TLS:

 # Secure: we're using HTTPS
-# CMD_PROTOCOL_USESSL=true
+CMD_PROTOCOL_USESSL=true

 # Domain: you need to define this if you wish to enable any options
-# CMD_DOMAIN=example.org:1337
+CMD_DOMAIN=example.org:1337

After deploying this configuration, run certbot to make it available over HTTPS. See this article for more information.

Migration

If you already have an instance of CTFNote in a previous version and wish to upgrade, you should follow the guide at MIGRATION.md.

Privileges

When other players register on your CTFNote instance, they will not be able to see CTF or tasks. This is because CTFNote uses different roles to restrict CTF

You can manage other players' roles in the Users tab of the Admin panel.

Additionally, you can generate a secret that lets users create an account with a different privilege in the Registration with password menu in the Admin panel.

Screenshot of the Registration with password menu

Guest

Guest is the default role. This role is meant to be used for guests and friends helping sporadically on CTF.

You can add a guest to a CTF by ticking their badge in the Guests tab on a specific CTF.

Screenshot of the guest menu

Friend

Friend is a role between guest and member which allows the player to automatically view old CTFs but not active and upcoming CTFs. They are also not allowed to invite any new players to a CTF. You can use this role to grant guests access to your old CTFs for them to learn from without granting access to each old CTF individually.

Member

Member is a role that represents a team member. A certain level of trust is given to these users: they can see every CTF, future, current and past. They can also invite guests to CTF.

Manager

Manager is a role that represents a team captain. They can create, import, modify and delete CTF.

They can import CTF directly from CTFtime.

Screenshot of the Import CTF feature

Admin

Admin is a role with every privileges. They have access to the Admin panel that lets them delete accounts, change permissions, reset passwords, create one-time secrets and, most importantly, change the theme colours.

Screenshot of the theme menu

Configuration

The configuration can be changed in the .env file. This file contains environment variables for the containers.

The value of every variables are explained in this file.

Screenshots

List of the CTF

Screenshot of the CTF page

Calendar

Screenshot of the CTF calendar

Information of a single CTF

Screenshot of the CTF info

Task list for a CTF

Screenshot of the task list

Shared notepad for a task

Screenshot of pad