Skip to content

Conversation

@capitanbanana
Copy link

No description provided.

README.md Outdated
#### How to:
### Quick Start
#### Examples
* [Minimal working example](https://github.com/HackerDom/Gornilo/blob/master/gornilo/examples/checker.py)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use relative pathes instead of absolute:
[Minimal working example](examples/checker.py)

Same for abstract_checker.py

Checker has similliar functionality to e2e tests. It has three most important methods:
* `CHECK` that service works correct.
* `PUT` flag to service
* `GET` flag from service, and check that falg is correct
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typo: falg -> flag

README.md Outdated
```
__CHECK__ - check all service functionality
__PUT_1__ - put flag of firts type
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typo: firts -> first

* `OK` - method complete without problems
* `MUMBLE` - service response incorrect
* `DOWN` - failed connect to a service
* `CHECKER_ERROR` - exceptions in checker, or brocken checker logic
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typo: brocken -> broken

Flag rate is an option adjusting how many flags of this type are put into the service per round. In general, various flag types are implemented for various vulnerabilities that vary in complexity. With __flag rate__ you can put more flag to difficult vuln and less to easy.

#### Flag id
Flag id-all data you need to get the flag, for example username+password. Passed from `PUT` to `GET` methods.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

...id - all...
Or contains :)


        #check flag
        if actual["gringotts_pass_phrase"] != request.flag: 
            return Verdict.CORRUPT(f"Expected falg {request.flag}, but actual {actual['secret']}")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typo: falg -> flag

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants