add challenge andromeda-cloude-storage v2 (crypto)

crypto/andromeda-cloud-storage-v2/challenge.yml

@@ -0,0 +1,34 @@
+name: "Andromeda Cloud Storage v2"
+author: "feltf"
+category: crypto
+
+description: |
+  The Andromeda Cloud Storage v2.0.0 is a highly secure encrypted storage that
+  provides assurance to its users about their data. Go ahead and register your
+  account to store your data securely in an intergalactic way. After
+  registration, you will "soon" receive your personal AES and MAC keys that we
+  randomly generate so that you can read the sweet secret flag.
+
+  New feature: Now we support the full range of bytes!!!
+
+value: 500
+type: dynamic_docker
+extra:
+  initial: 500
+  minimum: 100
+  decay: 50
+  redirect_type: direct
+  compose_stack: !filecontents docker-compose.yml
+
+flags:
+  - CCSC{p4dd1ng_oracl3_att4ck_due_to_flawed_implem3ntati0n_of_decryption!9f03268fc9363db00c7a43}
+
+tags:
+  - crypto
+  - medium-hard
+
+files:
+  - "public/server.py"
+
+state: hidden
+version: "0.1"

crypto/andromeda-cloud-storage-v2/docker-compose.yml

@@ -0,0 +1,13 @@
+version: "3.7"
+
+services:
+  challenge:
+    image: ghcr.io/cybermouflons/ccsc2024/andromeda-cloud-storage-v2:latest
+    restart: always
+    ports:
+      - 1337:1337
+    build:
+      context: ./setup
+      dockerfile: Dockerfile
+      labels: 
+        ctf.challenge.name: andromeda-cloud-storage-v2

crypto/andromeda-cloud-storage-v2/public/server.py

@@ -0,0 +1 @@
+../setup/server.py

crypto/andromeda-cloud-storage-v2/setup/Dockerfile

@@ -0,0 +1,21 @@
+FROM python:3.10.2-alpine
+
+RUN apk add --no-cache gcc musl-dev gmp-dev
+
+RUN addgroup -S ctf && adduser -S ctf -G ctf
+RUN mkdir /app
+WORKDIR /app
+
+COPY requirements.txt /app/
+RUN pip install -r requirements.txt
+
+COPY secret.py/ /app/
+COPY server.py/ /app/
+
+RUN chown ctf -R /app
+RUN chmod a+x /app/server.py
+
+EXPOSE 1337
+
+USER ctf
+CMD ["/app/server.py"]

crypto/andromeda-cloud-storage-v2/setup/requirements.txt

@@ -0,0 +1,2 @@
+pycryptodome==3.20.0
+pytz==2024.1

crypto/andromeda-cloud-storage-v2/setup/secret.py

@@ -0,0 +1 @@
+FLAG = b"\x00"*16 + b"CCSC{p4dd1ng_oracl3_att4ck_due_to_flawed_implem3ntati0n_of_decryption!9f03268fc9363db00c7a43}" + b"\x00\xff"