CSESoc Scavhunt

---

Original repo

---

Features

The admin can create/edit:

• Categories - All questions and submissions must be associated with a category.

• Questions - Users can submit an answer for a question. There can only be one correct answer for a question. It is not case sensitive.

• Submissions - Users can submit an entry for a submission. The admin can approve/unapprove submissions.

Questions and submissions that have been approved are awarded points.

The admin can view a user's username, points and solves. They can also delete a user.

Users can be viewed sorted by:

• Username (Descending)
• Username (Ascending)
• Points (Descending)
• Points (Ascending)
• Solves (Descending)
• Solves (Ascending)

Both users and the admin can view the leaderboard where users are ranked by points. The admin is not on the leaderboard.

Solved questions and submissions (submissions that have been approved by the admin) appear green to users.

Pending submissions (submissions that have not been approved by the admin) appear yellow to users.

Installation

A requirements.txt file is located in the server folder
python3 -m pip install -r requirements.txt

Run

cd ~/scavhunt/server
python3 -m pip install -r requirements.txt
python3 server.py

HTTP v HTTPS

The following assumes the server will run over HTTPS. Change scavhunt.tech to the appropriate domain. It also assumes that you have installed a HTTPS certificate at the following location:

/etc/letsencrypt/live/scavhunt.tech/fullchain.pem
/etc/letsencrypt/live/scavhunt.tech/privkey.pem

If this is not the case, the server will instead try to run over HTTP.

To get HTTPS certificates, type the following on the server:

sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install certbot
sudo certbot certonly --standalone

To autorenew, add the following into crontab:

0 0 1 * * sudo apt-get update && sudo apt-get upgrade && sudo apt autoremove
0 0 1 * * sudo certbot renew

Run on Server

cd ~/scavhunt/server
sudo apt-get update && sudo apt-get upgrade && sudo apt autoremove
sudo lsof -t -i tcp:443 -s tcp:listen | sudo xargs kill
sudo nohup python3 server.py &

Configuration File

When the server first runs, a settings.ini file will be automatically created from the settings.example.ini skeleton.

[SERVER]
port = 443               # Port to listen on
database = data.sqlite3 # SQLite database file 

[SITE]
templatesDir = ../site  # Jinja template base path
staticDir = ../site     # Static file base path

[ADMIN]
username = admin        # Superuser username
password = password     # Superuser password

Todo

• Admin scroll
• Update user view when submission apporved
• Update admin view of users dynamically
• Score on hover
• Admin accounts
• Fix mobile view (login)
• Same account question sync
• Sanitise spaces

---

Credits

This was originally created by Andrew Wong for the CSESoc Compclub 2019 Summer CTF.

It has been modified by Michael Gribben for CSESoc's Scavhunt.

Server (Python)

Jinja2 - Version 2.10.1
tornado - Version 5.1.1

Website

bulma.css - Version 0.7.2
Bulma-extensions
normalize.css - Version 8.0.1
three.js - Version 98

Font Awesome
Hack - Version 3.3.0

Snippets / Resources

glitch - sketch of three.js by yoichi kobayashi
Jinja2 Rendering stub for Tornado by Bibhas Debnath
Dotted World Map by sNowFleikuN
CSS Scanlines by meduzen

---

License

This software is licensed under the MIT License.
You are free to redistribute it and/or modify it under the terms of the license.