Gmocanu/session 02 task

cookies-session-management-access-control/activities/beep-beep-boop/README.md

@@ -0,0 +1,27 @@
+# Name: Beep beep boop
+
+## Description
+
+Get the flag from http://141.85.224.115:8088.
+
+Score: 50
+
+## Vulnerability
+
+Information disclosure in robots.txt leading to a hidden PHP file. The cookie from that page also needs to be set to a certain value.
+
+## Exploit
+
+Script in `./sol/solution.sh`
+
+## Environment
+
+Apache web server. (deployable as a Docker container using files in `deploy/` folder)
+
+## Deploy
+
+Copy `deploy/` folder and run `make run`.
+
+If you need to update the image and container, remove the old container with `make clean` and update the image (and container) using `make`.
+
+It is not possible to update the container without updating the image first.

cookies-session-management-access-control/activities/beep-beep-boop/deploy/Dockerfile

@@ -0,0 +1,3 @@
+FROM php:7.2-apache
+
+COPY /public /var/www/html/

cookies-session-management-access-control/activities/beep-beep-boop/deploy/Makefile

@@ -0,0 +1,16 @@
+FILE	:=../flag
+FLAG	:=$(shell cat $(FILE))
+
+build:
+	docker build -f Dockerfile -t sss-web-02_beep-beep-boop ..
+
+run: build
+	docker run -d -p 8088:80 --name sss-web-02_beep-beep-boop sss-web-02_beep-beep-boop
+
+stop:
+	docker stop sss-web-02_beep-beep-boop
+
+clean: stop
+	docker rm sss-web-02_beep-beep-boop
+
+.PHONY: build run stop clean

cookies-session-management-access-control/activities/beep-beep-boop/flag

@@ -0,0 +1 @@
+SSS{We_w0rsh1p_1saac_As1m0v}

cookies-session-management-access-control/activities/beep-beep-boop/src/73656372657420666f72204153494d4f.template.php

@@ -0,0 +1,9 @@
+<?php
+setcookie('robotType', 'HUMAN'); // 48756d616e
+
+if ($_COOKIE['robotType'] == 'ASIMOV') { // 4153494d4f
+	echo 'Congrats! You’ve proven to be worthy. <br />Here is your secret: __TEMPLATE__';
+} else {
+	echo 'This is a secure area that can only be accessed by the most advanced humanoid robots.';
+}
+?>

cookies-session-management-access-control/activities/beep-beep-boop/src/Makefile

@@ -0,0 +1,12 @@
+FILE	:=../flag
+FLAG	:=$(shell cat $(FILE))
+
+generate:
+	rm -rf ../public
+	mkdir -p ../public
+	cp -r assets/ ../public
+	cp index.html ../public
+	cp robots.txt ../public
+	sed 's/__TEMPLATE__/$(FLAG)/g' ./73656372657420666f72204153494d4f.template.php > ../public/73656372657420666f72204153494d4f.php
+
+.PHONY: generate