H

CHALLENGE_FORMAT_SPEC.md

@@ -0,0 +1,263 @@
+# Challenge Format Specification — Crypto/Forensics Track
+
+**Version:** 0.1 (Draft)
+**Last updated:** 2026-06-03
+**Applies to:** `public.crypto_challenges` table (new)
+
+---
+
+## 1. Philosophy
+
+التحدي الحقيقي يحاكي CTF/HTB. اللاعب **يكتشف** الخوارزمية ويكسرها بنفسه.
+**ممنوع** تسليم الإجابة في story/task. **ممنوع** إنشاء `flag.txt` كاختصار.
+العلم الصحيح يُخزَّن كـ `SHA-256 hash` فقط — اللاعب يدخل إجابته والـ backend يقارن الـ hash.
+
+---
+
+## 2. Database Schema
+
+```sql
+CREATE TABLE public.crypto_challenges (
+  id              uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  team_role       text NOT NULL CHECK (team_role IN ('blue', 'red')),
+  module          text NOT NULL,  -- encryption-basics, hash-cracking, rsa-aes, ...
+  title           text NOT NULL,
+  story           text NOT NULL,  -- واقعي، ما يذكر اسم الخوارزمية
+  files           jsonb NOT NULL DEFAULT '{}'::jsonb,
+                   -- {filename: base64_content}
+  file_metadata   jsonb NOT NULL DEFAULT '{}'::jsonb,
+                   -- {filename: {size, type, perms, mtime}}
+  command_outputs jsonb NOT NULL DEFAULT '{}'::jsonb,
+                   -- {pattern: {stdout, stderr, exit_code}}
+                   -- pattern: "cmd:args:filename" or "cmd:args"
+  hints           jsonb NOT NULL DEFAULT '[]'::jsonb,
+                   -- [{level: 1, text: "...", xp_cost: 25}, ...]
+  tools_whitelist text[] NOT NULL DEFAULT '{}'::text[],
+  flag_hash       text NOT NULL,  -- SHA-256 of correct flag
+  flag_preview    text,           -- "Cybe..." for UX only (not the full flag)
+  difficulty      text NOT NULL CHECK (difficulty IN ('مبتدئ', 'متوسط', 'قوي')),
+  xp_reward       integer NOT NULL DEFAULT 150,
+  created_at      timestamptz NOT NULL DEFAULT now()
+);
+```
+
+### Indexes
+- `idx_crypto_team_module` ON `(team_role, module)`
+- `idx_crypto_difficulty` ON `(difficulty)`
+
+### RLS
+- `Allow all read` (like `blue_scenarios`)
+- `Allow insert/update/delete` for service role only
+
+---
+
+## 3. Forbidden Anti-Patterns (in `story` + `task`)
+
+**Validation script** يفحص كل challenge جديد/معدّل قبل الإدراج. أي ظهور لكلمة ممنوعة = reject.
+
+### 3.1 أسماء الخوارزميات المباشرة
+| Module | ممنوع |
+|--------|-------|
+| encryption-basics | `caesar`, `vigenere`, `rot13`, `base64`, `xor`, `aes`, `des` |
+| hash-cracking | `md5`, `sha1`, `sha256`, `ntlm`, `bcrypt` |
+| rsa-aes | `rsa`, `wiener`, `bleichenbacher`, `padding oracle` |
+| steganography | `steganography`, `lsb`, `exiftool` |
+| forensics | `volatility`, `memdump`, `pcap` |
+
+### 3.2 أدوات مكشوفة
+`john`, `hashcat`, `crackstation`, `cyberchef`, `openssl`, `binwalk`, `zsteg`
+
+### 3.3 تسليم الإجابة
+`الإجابة:`, `الحل:`, `العلم في`, `flag.txt`, `افتح flag`, `استخدم أداة X لكسر`, `المفتاح هو`, `الـ key:`, `crack with`
+
+### 3.4 أسماء العلم في المتغير
+`flag{...}`, `CTF{...}`, `APEX{...}` في `story` أو `task` (لكن `CyberArena{...}` مسموح في `flag_hash` فقط)
+
+---
+
+## 4. Tools Whitelist (Command Allow-list)
+
+Backend endpoint `POST /api/training/terminal` يقبل أوامر من القائمة فقط:
+
+### Reading
+`cat`, `head`, `tail`, `strings`, `file`, `xxd`, `od`, `wc`, `hexdump`, `less`, `more`, `tac`, `rev`, `cut`, `tr`
+
+### Navigation
+`ls`, `cd`, `pwd`, `tree`, `find`, `stat`, `du`, `df`
+
+### Encoding/Transform
+`base64`, `base32`, `tr`, `sort`, `uniq`, `diff`, `nl`, `fold`, `column`
+
+### Analysis (custom helpers)
+`freq` — letter/byte frequency analysis
+`ic` — Index of Coincidence
+`ent` — Shannon entropy
+`kasiski` — Kasiski examination (Vigenere key length)
+`chi2` — chi-squared test against English
+`identify` — magic-byte file identification
+
+### Crypto (pre-computed)
+`openssl` — limited subcommands: `rsa -text`, `rsautl -decrypt`, `enc -d -aes-256-cbc`
+`hashcat -m <mode> hashes.txt wordlist.txt` — returns pre-computed results
+`john --format=<fmt> hashes.txt` — returns pre-computed results
+`rsatool`, `wiener` (custom Python wrappers)
+
+### Shell
+`echo`, `printf`, `test`, `expr`, `bc`, `date`
+`python3 -c "..."` — sandboxed Python REPL with limited stdlib (no `os`, `subprocess`, `socket`)
+`export VAR=value` (limited to challenge scope)
+
+### **Forbidden (always rejected)**
+`rm`, `mv`, `cp` outside challenge dir, `curl`, `wget`, `chmod`, `chown`, `sudo`, network commands, `dd` to devices
+
+---
+
+## 5. Terminal Endpoint Contract
+
+### Request
+```http
+POST /api/training/terminal
+Content-Type: application/json
+Authorization: Bearer <user_token>
+
+{
+  "challenge_id": "uuid",
+  "command": "cat intercepted.bin",
+  "cwd": "/home/agent/challenge"
+}
+```
+
+### Response (success)
+```json
+{
+  "stdout": "THE CIPHERTEXT BYTES...",
+  "stderr": "",
+  "exit_code": 0,
+  "files_changed": [],
+  "duration_ms": 12
+}
+```
+
+### Response (rejected)
+```json
+{
+  "error": "command_not_allowed",
+  "command": "rm -rf /",
+  "reason": "rm is in deny-list"
+}
+```
+
+### Response (file not found)
+```json
+{
+  "stdout": "",
+  "stderr": "cat: missing.bin: No such file or directory",
+  "exit_code": 1
+}
+```
+
+### Backend Logic
+1. Validate challenge exists in `crypto_challenges`
+2. Parse command → extract `cmd`, `args`, `filename`
+3. Check `cmd in tools_whitelist` (challenge-specific) **AND** in global whitelist
+4. Look up `command_outputs[pattern]`:
+   - Pattern: `cat:args:filename` (specific)
+   - Falls back to: `cat:filename`
+   - Falls back to: `cat`
+5. If not found, simulate generic behavior (e.g., `ls` returns file list from `files` keys)
+6. Return result
+
+---
+
+## 6. Flag Validation
+
+### Submission Endpoint
+```http
+POST /api/training/answer
+{
+  "challenge_id": "uuid",
+  "answer": "CyberArena{kasiski_1863_renewed}"
+}
+```
+
+### Backend
+```python
+import hashlib
+expected_hash = challenge["flag_hash"]  # from DB
+attempt_hash = hashlib.sha256(answer.strip().encode()).hexdigest()
+secured = (attempt_hash == expected_hash)
+```
+
+### UI Behavior
+- Wrong answer: `secured: false`, generic feedback ("حاول مرة أخرى")
+- Hint spent: `xp_reward` reduced by `hints[i].xp_cost`
+- Right answer: `secured: true`, full XP awarded, scenario deleted, refill triggered
+
+---
+
+## 7. Required Metadata (per challenge)
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `module` | enum | One of 28 modules in CYBER_SECURITY_TOPICS |
+| `tools_whitelist` | string[] | Subset of global whitelist, e.g., `["cat", "freq", "python3", "kasiski"]` |
+| `command_outputs` | jsonb | Pre-computed responses for common commands |
+| `flag_hash` | sha256 hex | Lowercase, 64 chars |
+| `hints` | jsonb array | 2-4 hints, increasing reveal |
+| `difficulty` | enum | مبتدئ/متوسط/قوي |
+
+---
+
+## 8. Generator Prompt (Groq)
+
+```
+You are a CTF challenge author. Generate a realistic crypto/forensics challenge.
+
+OUTPUT JSON ONLY with this exact structure:
+{
+  "title": "...",
+  "story": "...",
+  "files": { "filename": "<base64 of file content>" },
+  "hints": [{"level":1,"text":"..."},{"level":2,"text":"..."}],
+  "flag": "CyberArena{...}",
+  "difficulty": "مبتدئ" | "متوسط" | "قوي"
+}
+
+RULES:
+- NEVER name the algorithm in story/hints (no "Caesar", "MD5", "Vigenere", "AES")
+- NEVER say "use tool X" or "the key is Y"
+- NEVER use the word "flag.txt" or imply a pre-made file contains the answer
+- Story should make the player curious, not instruct
+- Files should be real data the player must analyze
+- The flag should be the natural conclusion of solving the challenge
+- Difficulty: stronger challenges have more steps, more files, more analysis
+```
+
+### Backend Validation
+After Groq returns, run `validate_challenge(payload)`:
+1. Lowercase + scan for forbidden words
+2. SHA-256 hash the flag
+3. Compute `command_outputs` for this specific payload
+4. Insert into DB
+
+---
+
+## 9. Sample Challenge (full)
+
+See `migrations/004_crypto_challenges.sql` for working SQL.
+
+---
+
+## 10. Migration Plan
+
+| Step | Action | Status |
+|------|--------|--------|
+| 1 | Create `crypto_challenges` table | TODO |
+| 2 | Add 1 sample challenge (Vigenere) | TODO |
+| 3 | Build `/api/training/terminal` endpoint | TODO |
+| 4 | Build `/api/training/answer` endpoint | TODO |
+| 5 | Frontend: `<CyberLab>` component | TODO |
+| 6 | Frontend: `<FlagInput>` with hash check | TODO |
+| 7 | Add 14 more challenges (all 4 focus areas) | TODO |
+| 8 | Wire into `populate_pool_background` | TODO |
+| 9 | Anti-pattern validator in `generate_crypto_challenge` | TODO |

Dockerfile

@@ -0,0 +1,14 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+ENV PORT=7860
+
+EXPOSE 7860
+
+CMD ["python", "main.py"]

apply_migration_005.py

@@ -0,0 +1,169 @@
+"""
+apply_migration_005.py
+======================
+Applies migration 005 to create the `web_exploitation_challenges` table.
+
+Tries three strategies in order:
+  1. Supabase Management API (requires SUPABASE_ACCESS_TOKEN env var)
+  2. Direct PostgreSQL connection (requires DATABASE_URL env var)
+  3. Fall back to: print the SQL + clipboard + step-by-step instructions
+
+Usage:
+    python apply_migration_005.py            # tries strategies 1+2 then prints
+    python apply_migration_005.py --print    # skip strategies, just print SQL
+    python apply_migration_005.py --copy     # print + copy to clipboard
+"""
+import argparse
+import os
+import sys
+import time
+from pathlib import Path
+
+# Force UTF-8 output
+sys.stdout.reconfigure(encoding="utf-8", errors="replace")
+
+# Load .env if available
+try:
+    from dotenv import load_dotenv
+    _env_path = Path(__file__).parent / ".env"
+    if _env_path.exists():
+        load_dotenv(_env_path)
+except ImportError:
+    pass
+
+MIGRATION_FILE = Path(__file__).parent / "migrations" / "005_web_exploitation_challenges.sql"
+SUPABASE_URL = os.environ.get("SUPABASE_URL", "https://yevtnyokixocpihpdwqu.supabase.co")
+SUPABASE_PROJECT_ID = SUPABASE_URL.replace("https://", "").replace("http://", "").split(".")[0]
+SUPABASE_ACCESS_TOKEN = os.environ.get("SUPABASE_ACCESS_TOKEN", "")
+DATABASE_URL = os.environ.get("DATABASE_URL", "")
+
+
+def banner(msg: str) -> None:
+    print()
+    print("=" * 70)
+    print(f"  {msg}")
+    print("=" * 70)
+
+
+def print_sql() -> None:
+    print(MIGRATION_FILE.read_text(encoding="utf-8"))
+
+
+def try_supabase_management_api() -> bool:
+    """Strategy 1: use the Supabase Management API to run SQL.
+
+    Requires a personal access token from https://supabase.com/dashboard/account/tokens
+    in SUPABASE_ACCESS_TOKEN env var.
+    """
+    if not SUPABASE_ACCESS_TOKEN:
+        return False
+
+    import httpx
+
+    banner("Strategy 1: Supabase Management API")
+    print(f"Project: {SUPABASE_PROJECT_ID}")
+
+    sql = MIGRATION_FILE.read_text(encoding="utf-8")
+    url = f"https://api.supabase.com/v1/projects/{SUPABASE_PROJECT_ID}/database/query"
+    headers = {
+        "Authorization": f"Bearer {SUPABASE_ACCESS_TOKEN}",
+        "Content-Type": "application/json",
+    }
+    try:
+        with httpx.Client(timeout=30) as client:
+            resp = client.post(url, headers=headers, json={"query": sql})
+            if resp.status_code == 200:
+                print("✓ Migration applied via Management API")
+                return True
+            else:
+                print(f"✗ Management API returned {resp.status_code}: {resp.text[:200]}")
+                return False
+    except Exception as e:
+        print(f"✗ Management API failed: {e}")
+        return False
+
+
+def try_direct_postgres() -> bool:
+    """Strategy 2: connect directly to the Postgres database.
+
+    Requires DATABASE_URL env var (e.g. postgresql://postgres:PASS@db.PROJECT.supabase.co:5432/postgres)
+    Find this in Supabase Dashboard > Settings > Database > Connection string.
+    """
+    if not DATABASE_URL:
+        return False
+
+    banner("Strategy 2: Direct Postgres connection")
+    try:
+        import psycopg2
+    except ImportError:
+        print("✗ psycopg2 not installed. Run: pip install psycopg2-binary")
+        return False
+
+    sql = MIGRATION_FILE.read_text(encoding="utf-8")
+    try:
+        conn = psycopg2.connect(DATABASE_URL)
+        conn.autocommit = True
+        with conn.cursor() as cur:
+            cur.execute(sql)
+        conn.close()
+        print("✓ Migration applied via direct Postgres connection")
+        return True
+    except Exception as e:
+        print(f"✗ Direct Postgres failed: {e}")
+        return False
+
+
+def fallback_manual() -> None:
+    """Strategy 3: print the SQL and clear instructions."""
+    banner("Strategy 3: Manual — paste into Supabase SQL Editor")
+    print()
+    print("The migration SQL is printed below.")
+    print("To apply it manually:")
+    print(f"  1. Open: https://supabase.com/dashboard/project/{SUPABASE_PROJECT_ID}/sql/new")
+    print("  2. Paste the SQL into the editor")
+    print("  3. Click 'Run' (or press Ctrl+Enter)")
+    print()
+    print("-" * 70)
+    print_sql()
+    print("-" * 70)
+
+    # Optionally copy to clipboard (Windows)
+    if "--copy" in sys.argv:
+        try:
+            import subprocess
+            sql = MIGRATION_FILE.read_text(encoding="utf-8")
+            p = subprocess.Popen(["clip"], stdin=subprocess.PIPE, shell=True)
+            p.communicate(sql.encode("utf-16le"))
+            print("\n✓ SQL copied to clipboard")
+        except Exception as e:
+            print(f"\n(Clipboard copy failed: {e})")
+
+
+def main():
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--print", action="store_true", help="Only print the SQL, skip auto-apply")
+    parser.add_argument("--copy", action="store_true", help="Print + copy to clipboard")
+    args = parser.parse_args()
+
+    banner("CyberArena — Migration 005 (web_exploitation_challenges)")
+
+    if args.print:
+        print_sql()
+        return
+
+    # Try automatic strategies first
+    if try_supabase_management_api():
+        return
+    if try_direct_postgres():
+        return
+
+    # Fall back to manual
+    fallback_manual()
+
+    print()
+    print("After applying the migration, restart the backend.")
+    print("The [webex:red] pool watcher will populate 5 challenges within ~8 seconds.")
+
+
+if __name__ == "__main__":
+    main()

apply_migration_009.py

@@ -0,0 +1,208 @@
+"""
+Apply migration 009 (1v1 mode tables) to the Supabase project.
+
+================================================================
+3 ways to run this. Pick one:
+================================================================
+
+A) RECOMMENDED — one-shot via the Supabase SQL editor
+   1. Open https://app.supabase.com/project/yevtnyokixocpihpdwqu/sql/new
+   2. Paste the contents of backend/migrations/009_onevone_mode.sql
+   3. Click "Run"
+   (no service key needed, takes 5 seconds)
+
+B) AUTOMATIC — this script, if you set SUPABASE_SERVICE_KEY in backend/.env
+   Get the key from: https://app.supabase.com/project/yevtnyokixocpihpdwqu/settings/api
+   → service_role / secret (NOT the anon key)
+
+C) PSQL DIRECT — if you have the postgres connection string
+   psql "postgresql://postgres:[PASSWORD]@db.yevtnyokixocpihpdwqu.supabase.co:5432/postgres" \
+        -f backend/migrations/009_onevone_mode.sql
+
+================================================================
+The script tries method B first, then falls back to printing the SQL
+for method A. It's idempotent — every CREATE uses IF NOT EXISTS.
+================================================================
+"""
+
+import os
+import sys
+import httpx
+from dotenv import load_dotenv
+
+backend_dir = os.path.dirname(os.path.abspath(__file__))
+load_dotenv(dotenv_path=os.path.join(backend_dir, ".env"))
+
+SUPABASE_URL = os.environ.get("SUPABASE_URL", "https://yevtnyokixocpihpdwqu.supabase.co").rstrip("/")
+SUPABASE_ANON_KEY = os.environ.get("SUPABASE_ANON_KEY", "")
+SUPABASE_SERVICE_KEY = os.environ.get("SUPABASE_SERVICE_KEY", "").strip()
+MIGRATION_PATH = os.path.join(backend_dir, "migrations", "009_onevone_mode.sql")
+
+
+def read_sql() -> str:
+    with open(MIGRATION_PATH, "r", encoding="utf-8") as f:
+        return f.read()
+
+
+def split_sql(sql: str) -> list[str]:
+    """Split a SQL script into individual statements (semi-colon separated,
+    ignoring those inside $$ ... $$ blocks)."""
+    statements: list[str] = []
+    buf: list[str] = []
+    in_dollar = False
+    for raw in sql.splitlines():
+        line = raw
+        if line.strip().startswith("--") and not buf:
+            continue
+        buf.append(line)
+        if "$$" in line:
+            in_dollar = not in_dollar
+        if line.rstrip().endswith(";") and not in_dollar:
+            stmt = "\n".join(buf).strip().rstrip(";").strip()
+            if stmt:
+                statements.append(stmt)
+            buf = []
+    if buf:
+        tail = "\n".join(buf).strip().rstrip(";").strip()
+        if tail:
+            statements.append(tail)
+    return statements
+
+
+def try_pg_endpoint(path: str, headers: dict, statements: list[str]) -> bool:
+    url = f"{SUPABASE_URL}{path}"
+    print(f"  → trying {url}")
+    try:
+        with httpx.Client(timeout=60) as client:
+            for i, stmt in enumerate(statements, 1):
+                preview = stmt.splitlines()[0][:70]
+                r = client.post(url, headers=headers, json={"query": stmt})
+                if r.status_code in (200, 201):
+                    print(f"    [{i}/{len(statements)}] OK    {preview}")
+                else:
+                    body = r.text[:200]
+                    if " PGREST205" in body or "schema cache" in body or "must be owner" in body:
+                        return False
+                    print(f"    [{i}/{len(statements)}] FAIL  HTTP {r.status_code}  {preview}")
+                    print(f"             {body}")
+                    return False
+        return True
+    except Exception as e:
+        print(f"  → network error: {e}")
+        return False
+
+
+def apply_via_pg_meta() -> bool:
+    if not SUPABASE_SERVICE_KEY:
+        return False
+    sql = read_sql()
+    statements = split_sql(sql)
+    print(f"Attempting pg-meta apply with {len(statements)} statements ...")
+    headers = {
+        "apikey": SUPABASE_SERVICE_KEY,
+        "Authorization": f"Bearer {SUPABASE_SERVICE_KEY}",
+        "Content-Type": "application/json",
+    }
+    # try common paths
+    for path in ("/pg/query", "/pg-meta/query", "/rest/v1/rpc/exec_sql"):
+        if try_pg_endpoint(path, headers, statements):
+            return True
+    return False
+
+
+def apply_via_management_api() -> bool:
+    """Try the Supabase management API (requires access token, not service key)."""
+    access = os.environ.get("SUPABASE_ACCESS_TOKEN", "").strip()
+    if not access:
+        return False
+    project_ref = SUPABASE_URL.split("//")[-1].split(".")[0]
+    url = f"https://api.supabase.com/v1/projects/{project_ref}/database/query"
+    sql = read_sql()
+    headers = {
+        "Authorization": f"Bearer {access}",
+        "Content-Type": "application/json",
+    }
+    print(f"Attempting Management API apply ...")
+    try:
+        with httpx.Client(timeout=60) as client:
+            r = client.post(url, headers=headers, json={"query": sql})
+            if r.status_code in (200, 201):
+                print(f"  → OK")
+                return True
+            print(f"  → HTTP {r.status_code}: {r.text[:200]}")
+    except Exception as e:
+        print(f"  → network error: {e}")
+    return False
+
+
+def show_manual_steps() -> None:
+    print()
+    print("=" * 70)
+    print("MANUAL STEPS (5 seconds, no token needed)")
+    print("=" * 70)
+    print()
+    print("1. Open this URL in your browser:")
+    print(f"   https://app.supabase.com/project/{SUPABASE_URL.split('//')[-1].split('.')[0]}/sql/new")
+    print()
+    print("2. Paste the following SQL:")
+    print("-" * 70)
+    print(read_sql())
+    print("-" * 70)
+    print()
+    print("3. Click 'Run' (or press Ctrl+Enter)")
+    print()
+    print("4. Re-run this script to verify:")
+    print("   python apply_migration_009.py --verify")
+    print()
+
+
+def verify() -> bool:
+    """Hit a known table via PostgREST to confirm it exists."""
+    if not SUPABASE_ANON_KEY:
+        print("!! SUPABASE_ANON_KEY missing — cannot verify")
+        return False
+    tables = [
+        "onevone_rooms", "onevone_players",
+        "onevone_matches", "onevone_submissions",
+    ]
+    headers = {
+        "apikey": SUPABASE_ANON_KEY,
+        "Authorization": f"Bearer {SUPABASE_ANON_KEY}",
+    }
+    all_ok = True
+    print("Verifying 1v1 tables exist ...")
+    with httpx.Client(timeout=20) as client:
+        for t in tables:
+            r = client.get(f"{SUPABASE_URL}/rest/v1/{t}?select=id&limit=1", headers=headers)
+            if r.status_code == 200:
+                print(f"  [OK]  {t}")
+            else:
+                body = r.text[:120].replace("\n", " ")
+                print(f"  [!!]  {t}  → HTTP {r.status_code}: {body}")
+                all_ok = False
+    return all_ok
+
+
+def main() -> int:
+    if "--verify" in sys.argv:
+        return 0 if verify() else 2
+
+    if not os.path.exists(MIGRATION_PATH):
+        print(f"!! migration file not found: {MIGRATION_PATH}")
+        return 1
+
+    if apply_via_pg_meta():
+        print("\n[OK] Migration applied via pg-meta.")
+        verify()
+        return 0
+    if apply_via_management_api():
+        print("\n[OK] Migration applied via management API.")
+        verify()
+        return 0
+
+    show_manual_steps()
+    return 2
+
+
+if __name__ == "__main__":
+    sys.exit(main())

challenge_files/blue_android-ios_1780374909_app_logs.txt

@@ -0,0 +1,3 @@
+2023-02-15 14:30:00 - Sent data to 192.168.1.100:8080
+2023-02-15 14:31:00 - Received response from 192.168.1.100:8080
+2023-02-15 14:32:00 - Sent data to 192.168.1.101:8080

challenge_files/blue_binary-analysis_1780074195_MalwareX.exe

@@ -0,0 +1 @@
+00000000 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00

challenge_files/blue_binary-analysis_1780439585_MalwareX.exe

@@ -0,0 +1,16 @@
+00000000  4d 5a 90 00 03 00 00 00  04 00 00 00 ff ff 00 00  |MZ..............|
+00000010  b8 00 00 00 00 00 00 00  40 00 00 00 00 00 00 00  |........@.......|
+00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+00000030  00 00 00 00 00 00 00 00  00 10 00 00 00 02 00 00  |................|
+00000040  14 01 00 00 00 10 00 00  00 00 00 00 00 00 00 00  |................|
+00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

challenge_files/blue_cloud-config_1780424632_docker-compose.yml

@@ -0,0 +1 @@
+version: '3'<br/>services:<br/>  web:<br/>    build: .<br/>    ports:<br/>      - "80:80"<br/>    volumes:<br/>      - .:/app

challenge_files/blue_csrf_1780074134_index.html

@@ -0,0 +1 @@
+<!DOCTYPE html><html><head><title>تعديل الملفات الشخصية</title></head><body><h1>تعديل الملفات الشخصية</h1><form action="/edit-profile" method="post"><input type="hidden" name="csrf_token" value="1234567890"><input type="text" name="username" placeholder="اسم المستخدم"><input type="email" name="email" placeholder="البريد الإلكتروني"><input type="password" name="password" placeholder="كلمة المرور"><button type="submit">حفظ التغييرات</button></form></body></html>

challenge_files/blue_dns-poisoning_1780073949_dns-logs.txt

@@ -0,0 +1,3 @@
+2023-02-16 14:30:00, 192.168.1.100, 8.8.8.8, A, apex.com, 192.168.1.200
+2023-02-16 14:31:00, 192.168.1.101, 8.8.8.8, A, apex.com, 192.168.1.201
+2023-02-16 14:32:00, 192.168.1.102, 8.8.8.8, A, apex.com, 192.168.1.202

challenge_files/blue_encryption-basics_1780073989_encrypted_message.txt

@@ -0,0 +1 @@
+GUR PENML XRL VF ZL FRPERG CBFG

challenge_files/blue_encryption-basics_1780074215_hashes.txt

@@ -0,0 +1 @@
+098f6bcd4621d373cade4e832627b4f6

challenge_files/blue_encryption-basics_1780430362_encryption_logs.txt

@@ -0,0 +1,3 @@
+2022-01-01 12:00:00 - ملف1.txt - md5
+2022-01-01 12:05:00 - ملف2.txt - sha1
+2022-01-01 12:10:00 - ملف3.txt - md5

challenge_files/blue_encryption-basics_1780439473_file.enc

@@ -0,0 +1 @@
+md5_hash_here

challenge_files/blue_firewall_1780074071_firewall.conf

@@ -0,0 +1,3 @@
+iptables -A INPUT -p tcp --dport 22 -j ACCEPT
+iptables -A INPUT -p tcp --dport 80 -j ACCEPT
+iptables -A INPUT -p icmp -j DROP

challenge_files/blue_hash-cracking_1780074009_hashes.txt

@@ -0,0 +1 @@
+098f6bcd4621d373cade4e832627b4f6

challenge_files/blue_idor_1780074051_users.json

@@ -0,0 +1 @@
+[{'id': 1, 'name': 'مستخدم 1'}, {'id': 2, 'name': 'مستخدم 2'}]

challenge_files/blue_idor_1780435338_user_data.json

@@ -0,0 +1 @@
+{"id": 1, "name": "محمد", "email": "mohammed@example.com"}

challenge_files/blue_packet-analysis_1780073929_capture.pcap

@@ -0,0 +1 @@
+حزم شبكة مجمعة تمثل حركة المرور على الشبكة، تحتوي على حزم مشبوهة

challenge_files/blue_rsa-aes_1780074174_public_key.txt

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Dbv8prpJ/0kKhlGeJY
+ozo2t60EG8L0561g13R29LvMR5hyvGZlGJpmn65+A4xHXInJYiPuKzrKfDNSH
+-----END PUBLIC KEY-----

challenge_files/blue_scanning_1780074319_network_log.txt

@@ -0,0 +1,4 @@
+192.168.1.100 - - [21/Jan/2024:12:30:00 +0000] "GET / HTTP/1.1" 200 1234
+192.168.1.101 - - [21/Jan/2024:12:30:01 +0000] "GET / HTTP/1.1" 200 1234
+192.168.1.102 - - [21/Jan/2024:12:30:02 +0000] "GET / HTTP/1.1" 200 1234
+192.168.1.100 - - [21/Jan/2024:12:30:03 +0000] "GET /admin HTTP/1.1" 401 1234

challenge_files/blue_sql-injection_1780438865_index.html

@@ -0,0 +1 @@
+<html><head><title>نظام تسجيل الدخول</title></head><body><h1>تسجيل الدخول</h1><form method='post' action='/login'><input type='text' name='username' placeholder='اسم المستخدم'><br><input type='password' name='password' placeholder='كلمة المرور'><br><button type='submit'>دخول</button></form></body></html>

challenge_files/blue_ssrf_1780074277_index.html

@@ -0,0 +1 @@
+<!DOCTYPE html><html lang='ar' dir='rtl'><head><meta charset='UTF-8'><meta name='viewport' content='width=device-width, initial-scale=1.0'><title>تطبيق Apex للأمن السيبراني</title><style>body { background-color: #333; color: #fff; }</style></head><body><h1>تطبيق Apex للأمن السيبراني</h1><form id='myForm'><input type='text' id='url' name='url' placeholder='أدخل الرابط'><button type='submit'>إرسال</button></form><script>const form = document.getElementById('myForm');form.addEventListener('submit', (e) => {e.preventDefault();const url = document.getElementById('url').value;if (!url.startsWith('https://apex.com/')) {alert('الرابط غير مخول'); return;}fetch(url).then((response) => response.text()).then((data) => console.log(data));});</script></body></html>

challenge_files/blue_web-security_1780671884_database.js

@@ -0,0 +1,13 @@
+function searchBooks(query) {
+  // استعلام قاعدة البيانات
+  var sql = "SELECT * FROM books WHERE title LIKE '%" + query + "%';";
+  // تنفيذ الاستعلام
+  db.execute(sql, function(err, results) {
+    if (err) {
+      console.error(err);
+    } else {
+      // معالجة النتائج
+      console.log(results);
+    }
+  });
+}

challenge_files/blue_xxe_1780074360_example.xml

@@ -0,0 +1 @@
+<?xml version='1.0' encoding='UTF-8'?><root><data>بيانات مثال</data></root>

challenge_files/red_active-directory_1780077323_passwords.txt

@@ -0,0 +1,3 @@
+admin:admin123
+user:user456
+guest:guest789

challenge_files/red_active-directory_1780374994_active_directory_dump.txt

@@ -0,0 +1,3 @@
+domain: xyz.local
+users: admin, user1, user2
+groups: admins, users

challenge_files/red_android-ios_1780374952_config.xml

@@ -0,0 +1 @@
+<config><flag>CyberArena{Android_Security_Breach}</flag></config>

challenge_files/red_binary-analysis_1780074402_encrypted_file.bin

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e4f9229b57de49dd3c5313210705d8c447fe31b4e1472e6436bf2fd59a273276
+size 16

challenge_files/red_cloud-config_1780374930_Dockerfile

@@ -0,0 +1,5 @@
+FROM python:3.9-slim
+RUN pip install flask
+COPY app.py /
+EXPOSE 8080
+CMD ["python", "app.py"]

challenge_files/red_command-injection_1780096653_output.txt

@@ -0,0 +1 @@
+سوف يحتوي هذا الملف على вывод الأمر 'ls -l'

challenge_files/red_command-injection_1780106333_users.txt

@@ -0,0 +1,2 @@
+مستخدم1:كلمة_سر_1
+مستخدم2:كلمة_سر_2

challenge_files/red_csrf_1780120899_csrfExploit.html

@@ -0,0 +1 @@
+<html><body><h1>استغلال الثغرة</h1><form action='https://apex-admin.com/createUser' method='post'><input type='hidden' name='username' value='hacker'><input type='hidden' name='password' value='password123'><input type='submit' value='استغلال'></form></body></html>

challenge_files/red_encryption-basics_1780514019_secret.enc

@@ -0,0 +1 @@
+U2FsdGVkX1+u8X5Wj7x4qJL7DZKJ8i4q

challenge_files/red_encryption-basics_1780604677_hieroglyph.txt

@@ -0,0 +1 @@
+GUR PENML XRL VF ZL FRPERG CBFG

challenge_files/red_hash-cracking_1780150004_hash.txt

@@ -0,0 +1,3 @@
+45c48ece2e2d4dd4c2d2d4c2d2d4c2
+98f98f98f98f98f98f98f98f
+76c76c76c76c76c76c76c

challenge_files/red_hash-cracking_1780528922_shadow.txt

@@ -0,0 +1 @@
+$6$rounds=5000$yQ6ZBh9p$ZzD1GyN8K4j9VW9pM8K4j9VW9pM8K4j9VW9pM8K4j9VW9pM8K4j9VW9pM8K4

challenge_files/red_idor_1780082059_idor_payload.txt

@@ -0,0 +1 @@
+456

challenge_files/red_idor_1780116014_user_profiles.txt

@@ -0,0 +1,3 @@
+معلومات المستخدمين: 
+ المستخدم 1: رقم المستخدم = 123, اسم = أحمد, كلمة المرور = ahmed123 
+ المستخدم 2: رقم المستخدم = 456, اسم = محمد, كلمة المرور = mohamed456

challenge_files/red_idor_1780125717_example.txt

@@ -0,0 +1 @@
+هذا هو الملف الذي يجب أن تتمكن من تحميله

challenge_files/red_idor_1780140240_idor_payload.txt

@@ -0,0 +1 @@
+username=apex_user&userId=1234

challenge_files/red_idor_1780375037_config.txt

@@ -0,0 +1,2 @@
+fileId=123
+fileName=example.txt

challenge_files/red_idor_1780438930_user.json

@@ -0,0 +1 @@
+{"id": 1, "name": "Ahmed", "email": "ahmed@example.com"}

challenge_files/red_lfi-rfi_1780154838_secret.txt

@@ -0,0 +1 @@
+البيانات السرية للمؤسسة

challenge_files/red_linux-privesc_1780439793_script.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+echo 'تمت إضافة مستخدم جديد'
+useradd -m -s /bin/bash user123
+echo 'تم تعيين كلمة المرور للمستخدم الجديد'
+echo 'user123:password123' | chpasswd

challenge_files/red_memory-forensics_1780074423_memory_dump.bin

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fac4b93cead0f653491146588a3289777ab6278d94b1d8d455d397ba83758616
+size 263

challenge_files/red_packet-analysis_1780374973_capture.pcap

@@ -0,0 +1 @@
+حزم شبكية تم جمعها لمدة 10 دقائق