Attack Defense

This repository contains some setups for useful tools for CTF A/D.
Thanks to suggestions from the Ulisse team at the University of Bologna, it was possible to modify or create tools in order to make them easily accessible and configurable during the national finals of Cyberchallenge 2024.

TODOs

• Create a script to exploit a misconfiguration of Tulip (no authentication set).
• Write an exploit template that can retrieve the flag-ids and submit flags to Destructive Farm.
• Setup a Docker for Tulip with authorization and pcap-broker.

Credits

• Tulips 🌷 Tulip is a flow analyzer meant for use during Attack / Defence CTF competitions. It allows players to easily find some traffic related to their service and automatically generates python snippets to replicate attacks.

• Destructive Farm Destructive Farm is an exploit farm for attack-defense CTF competitions.