Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-04-06 | Updated flags list. | David Barksdale | |
2012-04-06 | Be a bit more polite with failed logins. | David Barksdale | |
2012-04-06 | Added two new flags to home page with some reformatting. | David Barksdale | |
2012-04-05 | Added list of challenges. | David Barksdale | |
2012-04-05 | Throttle account creation. | David Barksdale | |
2012-04-05 | Created flag and scoreboard database. | David Barksdale | |
2012-04-04 | Avoid html injection. | David Barksdale | |
This is probably unnecessary because valid unix usernames don't have any bad characters in them. | |||
2012-04-04 | Added flag form and login sessions. | David Barksdale | |
2012-04-04 | Improved new account security. | David Barksdale | |
Since chpasswd takes multiple username:password lines it was possible to change the password of any account: curl -data "username=attacker&password=%0aroot:omghax" -k https://ctf/new | |||
2012-04-04 | Moved login form. | David Barksdale | |
2012-04-04 | Configure https. | David Barksdale | |
2012-04-03 | Made login and new user pages. | David Barksdale | |
New user page needs input validation. | |||
2012-04-03 | defpage "/" | David Barksdale | |
2012-04-03 | lein noir new ctf-website | David Barksdale | |