ractf / shell Goto Github PK

Caddy is rubbish and it refuses to proxy websockets. Swap it out for a real web server.

https://bsidesncl.ractf.co.uk

Why is this not white like the text next to it?

We're validating on the backend that 0 < decay constant < 1, it would be good to also check that on the frontend.

ractf/core#287

Currently, services like Microsoft Safe Links are clicking our email verification links. We should probably make the user click on a button on the email verification page, rather than just doing it when we load the page. Might also be useful to show event rules on that page if they've been set.

Google are killing off Universal Analytics 3. We should upgrade.

Is your feature request related to a problem? Please describe.
When people are nearing the completion of the CTF, they usually have a lots of challenges finished. However it may be of interest to admins to find out which challenges were not solved.

Describe the solution you'd like
If we look at the current UI, we can see there is a "Solves" tab, and a "Stats" tab.

I'd like there to be a "Remaining" or "Unsolved" tab as well.

Describe alternatives you've considered
N(A

Additional context
N/A

Sentry Issue: REACT-EF

Error: Rendered fewer hooks than expected. This may be caused by an accidental early return statement.
  at Ka (/static/js/2.ce887231.chunk.js:1:374937)
  at Fi (/static/js/2.ce887231.chunk.js:1:383573)
  at bs (/static/js/2.ce887231.chunk.js:1:422434)
  at bu (/static/js/2.ce887231.chunk.js:1:413841)
  at vu (/static/js/2.ce887231.chunk.js:1:413764)
...
(9 additional frame(s) were not displayed)

On Chrome:

On Firefox:

After accessing the teams tab from here:

It brings up the first error page. However, when I ctrl+f5 it, it fixes the issue. I was not part of a team when I accesed that page.
Thanks!

Sentry Issue: REACT-CH

UnhandledRejection: Non-Error promise rejection captured with value: undefined

Describe the bug
If you have more than 10 challenge categories, the pie chart runs out of colors.

To Reproduce
Steps to reproduce the behavior:

1. Create 11 categories
2. Go to Admin/Statistics
3. Check Challenges/Category
4. See error

Expected behavior
Every category should have a color

Screenshots

would be nice if it could refresh every few seconds automatically

Describe the bug
If you have enabled email address restrictions, pressing keys doesn't cause text to appear when typing in the email field.

To Reproduce
Steps to reproduce the behavior:

1. Login as admin
2. Go to configuration
3. Set a regex for email registration (e.g. .*@gmail\.com$) and save
4. Logout
5. Go to the registration page
6. Try and type an email address

Expected behavior
Should be able to input an email address, with regex restrictions only applying on submission.

Environment (please complete the following information):

• Chrome on Android
• Chrome on Windows

Describe the bug
When opening any modal (example: Admin view of user profile), whilst being zoomed in (or on a small monitor), the vertical delimiter between the aside and the main pane is displayed above the modal layer.

To Reproduce
Steps to reproduce the behavior:

1. Zoom in or emulate small screen responsively.
2. Go to any modal, open it. (In my case: Admin/Members, select any member)
3. See UI bug:

Expected behavior
No UI bug.

Screenshots
N/A

Environment (please complete the following information):

• OS: Win 10
• Brave Browser Version 1.38.109 Chromium: 101.0.4951.41 (Official Build) (64-bit)

Positions plz

Can it have an icon please

Is your feature request related to a problem? Please describe.
Ben wants CAPTCHAs on sign-up

Describe the solution you'd like
Implement reCAPTCHA v3

Describe alternatives you've considered
N/A

Additional context

Make a page with some lovely Plotly/D3 visualisations of the data pumped out by the stats endpoint. Users, solves, etc.

• API broadcasts message with new points for challenge with new action_type, chall id and new score
• Shell updates this

Reference:
Existing plugin
Where challs are edited in store
How websockets work

https://sentry.io/organizations/ractf/issues/1703109651/

api.incorrect_2fa: Incorrect 2-factor code prodided.

Amend to: Incorrect 2-factor code provided.

would be nice to know when audit log entries happened

The kind of thing that could be put up on a TV at an event.

Sentry Issue: REACT-CB

Error: ResizeObserver loop limit exceeded
  at None (/settings)

Currently the branding/lmax branch shows a horrible hack. We should move this into a theme.

Describe the bug
When searching for a user, a team name, etc. performing a search using the search field for any text that includes the pound sign # returns all results.

To Reproduce
Steps to reproduce the behavior:

1. Go to Admin/Teams
2. Search for #<An existing team name>
3. See error (all teams in order of registration are displayed)

Expected behavior
The results should be only the names containing the characters in the search field.

Screenshots

Environment (please complete the following information):
N/A

Sad and bad and no good

Dance Botters Dance

Sentry Issue: REACT-FE

TypeError: t.team.members is undefined
  at c (containers/pages/SettingsPage.js:224:21)
...
(11 additional frame(s) were not displayed)

When registering for an account, it is unclear if someone should register with their own personal team name or with their team name as this varies per CTF.

A notice on the account registration page would help with this - something along the lines of "Register an account to create or join a team" or "Register an account for your team", perhaps.

Whilst using another CTF platform, I found this layout to be enjoyable to use.

A few of the features I liked while using this design:

1. All challenges are displayed on one page
2. Page automatically updated as new challenges were unlocked
3. Page can be Ctrl+F'ed to find prior information
4. Hints are displayed in a list view below the submission box for each challenge
5. The amount of hint left is clearly displayed
6. The amount of points lost (by answering incorrectly) is displayed prominently
7. The amount of points available per challenge is clearly displayed
8. It is easy to tell whether a challenge has been solved or not
9. All challenge descriptions are expanded by default
10. Clickable category/stage list on the right to quickly jump to another stage.
11. All hints are displayed after correctly solving a challenge (although this is not completely related to the UI)

Another benefit of a one page design is that it can be saved by the user by using CTRL+S in a browser. This is more of a quirk of the platform I saw this on, as the CTF can be closed overnight / between sessions and it can be useful to keep a list of challenges to work on offline.

See screenshot below for inspiration.

In the same vein as useConfig, it'd be handy to have a hook for browser-local preferences that returns [config, setConfig].

RACTF-74