LayerOne 2021 CTF "Deathball: *" challenge series

docker-compose.yml

networks:
  126adb36989090edcabfe9305ea4d0a6: {}
  174882033225436b1440b7de44686450: {}
  2492fe9dabfa5151c1838c9a563cc947: {}
  2855b5e28b770cdbd153419340c287d4: {}
  291dd475d0224126a68550d7c406f3b1: {}
  5cd6a063c51df65aa0d61bbfd9882874: {}
  6a32e664018e3cb2a2f570388299451a: {}
  7bb487462b9e9721f62ebfd136e71f44: {}
  92f79736ce4676b9d41f8e962f12755e: {}
  a38d461d24e96016feb6b6d14db03fcc: {}
  c5d1c6f9159f558db83fa0e00c0d01f6: {}
  d4a9360e0ddc0398cf0fa40fa217c065: {}
  dedac868a6dd8805672ef5aa70855378: {}
  ff7cfe90fdd56e8e4d005dff9f4528a0: {}
services:
  amywong:
    build:
      args:
        flag_name: AmyWong
        flag_value: People_said_I_was_dumb_but_I_proved_them
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 111 -c 'php -a -d "cli.prompt=> "
      2>&1 | sed -u -r "s/^Interactive.*//g"'
    labels:
      depth: 2
      entrance: false
      flag: People_said_I_was_dumb_but_I_proved_them
      language: php
      name: AmyWong
      points: 45
      port: 111
    networks:
    - dedac868a6dd8805672ef5aa70855378
    restart: unless-stopped
  benderbendingrodriguez:
    build:
      args:
        flag_name: BenderBendingRodriguez
        flag_value: Just_a_few_more_hundred_thousand_miles_There
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 135 -c 'clojure -e "" -r 2>&1'
    labels:
      depth: 4
      entrance: false
      flag: Just_a_few_more_hundred_thousand_miles_There
      language: clojure
      name: BenderBendingRodriguez
      points: 80
      port: 135
    networks:
    - ff7cfe90fdd56e8e4d005dff9f4528a0
    restart: unless-stopped
  drzoidberg:
    build:
      args:
        flag_name: DrZoidberg
        flag_value: No_one_drove_in_New_York_There_was_too_much_traffic
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 179 -c 'ocaml -no-version'
    labels:
      depth: 3
      entrance: false
      flag: No_one_drove_in_New_York_There_was_too_much_traffic
      language: ocaml
      name: DrZoidberg
      points: 65
      port: 179
    networks:
    - a38d461d24e96016feb6b6d14db03fcc
    - 2855b5e28b770cdbd153419340c287d4
    restart: unless-stopped
  hermesconrad:
    build:
      args:
        flag_name: HermesConrad
        flag_value: Thats_so_plausible_I_cant_believe_it
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 465 -c 'jshell --feedback concise
      | sed -u -r "s/jshell//g"'
    labels:
      depth: 3
      entrance: false
      flag: Thats_so_plausible_I_cant_believe_it
      language: java
      name: HermesConrad
      points: 65
      port: 465
    networks:
    - d4a9360e0ddc0398cf0fa40fa217c065
    restart: unless-stopped
  kifkroker:
    build:
      args:
        flag_name: KifKroker
        flag_value: At_last_war_has_made_me_into_a_man_Weeeeee
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 443 -c 'R -q --no-save 2>&1'
    labels:
      depth: 3
      entrance: false
      flag: At_last_war_has_made_me_into_a_man_Weeeeee
      language: r
      name: KifKroker
      points: 65
      port: 443
    networks:
    - 7bb487462b9e9721f62ebfd136e71f44
    - 291dd475d0224126a68550d7c406f3b1
    - ff7cfe90fdd56e8e4d005dff9f4528a0
    restart: unless-stopped
  lindavanschoonhoven:
    build:
      args:
        flag_name: LindavanSchoonhoven
        flag_value: I_am_shocked_Shocked_Well_not_that_shocked
      context: .
    entrypoint: /usr/bin/ncat -k -vv -o /dev/stdout -l -p 514 -c '/usr/bin/pwsh -NoLogo
      -Interactive -NoExit -Command "function Prompt { \"> \" }" 2>&1'
    environment:
      PATH: ''
    labels:
      depth: 2
      entrance: false
      flag: I_am_shocked_Shocked_Well_not_that_shocked
      language: powershell
      name: LindavanSchoonhoven
      points: 55
      port: 514
    networks:
    - d4a9360e0ddc0398cf0fa40fa217c065
    - c5d1c6f9159f558db83fa0e00c0d01f6
    - 6a32e664018e3cb2a2f570388299451a
    - 7bb487462b9e9721f62ebfd136e71f44
    - 92f79736ce4676b9d41f8e962f12755e
    restart: unless-stopped
  morbo:
    build:
      args:
        flag_name: Morbo
        flag_value: No_fair_You_changed_the_results_by_measuring_it
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 113 -c 'julia -q --color no 2>&1'
    labels:
      depth: 3
      entrance: false
      flag: No_fair_You_changed_the_results_by_measuring_it
      language: julia
      name: Morbo
      points: 75
      port: 113
    networks:
    - 6a32e664018e3cb2a2f570388299451a
    restart: unless-stopped
  nibbler:
    build:
      args:
        flag_name: Nibbler
        flag_value: The_underprivileged_get_all_the_breaks
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 554 -c 'bash 2>&1'
    labels:
      depth: 0
      entrance: true
      flag: The_underprivileged_get_all_the_breaks
      language: bash
      name: Nibbler
      points: 30
      port: 554
    networks:
    - 2492fe9dabfa5151c1838c9a563cc947
    - 126adb36989090edcabfe9305ea4d0a6
    ports:
    - 4444:554
    restart: unless-stopped
  philipjfry:
    build:
      args:
        flag_name: PhilipJFry
        flag_value: each_pound_of_which_weighs_over_10_000_pounds
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 995 -c 'nodejs -i 2>&1'
    labels:
      depth: 2
      entrance: false
      flag: each_pound_of_which_weighs_over_10_000_pounds
      language: nodejs
      name: PhilipJFry
      points: 45
      port: 995
    networks:
    - a38d461d24e96016feb6b6d14db03fcc
    - 5cd6a063c51df65aa0d61bbfd9882874
    - 174882033225436b1440b7de44686450
    - 291dd475d0224126a68550d7c406f3b1
    restart: unless-stopped
  professorfarnsworth:
    build:
      args:
        flag_name: ProfessorFarnsworth
        flag_value: Comedys_a_dead_art_form_Now_tragedy_thats_funny
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 993 -c 'python3 -i /root/.pythonrc
      2>&1'
    labels:
      depth: 1
      entrance: false
      flag: Comedys_a_dead_art_form_Now_tragedy_thats_funny
      language: python
      name: ProfessorFarnsworth
      points: 40
      port: 993
    networks:
    - dedac868a6dd8805672ef5aa70855378
    - 5cd6a063c51df65aa0d61bbfd9882874
    - 126adb36989090edcabfe9305ea4d0a6
    - 92f79736ce4676b9d41f8e962f12755e
    restart: unless-stopped
  turangaleela:
    build:
      args:
        flag_name: TurangaLeela
        flag_value: Bodies_are_for_hookers_and_fat_people
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 143 -c 'pry --noprompt --no-color
      --no-pager 2>&1'
    labels:
      depth: 1
      entrance: false
      flag: Bodies_are_for_hookers_and_fat_people
      language: ruby
      name: TurangaLeela
      points: 40
      port: 143
    networks:
    - 2492fe9dabfa5151c1838c9a563cc947
    - 174882033225436b1440b7de44686450
    restart: unless-stopped
  zappbrannigan:
    build:
      args:
        flag_name: ZappBrannigan
        flag_value: Now_thats_a_wave_of_destruction_thats_easy_on_the_eyes
      context: .
    entrypoint: ncat -k -vv -o /dev/stdout -l -p 199 -c 'clisp -q'
    labels:
      depth: 3
      entrance: false
      flag: Now_thats_a_wave_of_destruction_thats_easy_on_the_eyes
      language: clisp
      name: ZappBrannigan
      points: 75
      port: 199
    networks:
    - 2855b5e28b770cdbd153419340c287d4
    - c5d1c6f9159f558db83fa0e00c0d01f6
    restart: unless-stopped
version: '3'

Dockerfile

FROM ubuntu:20.04

ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update -y \
    && apt-get install -y wget curl netcat ncat socat nmap zmap masscan iputils-ping net-tools iproute2 dnsutils \
    python3 default-jdk ruby nodejs ghc julia tcl r-base-core clisp ocaml-nox clojure php-cli
    # libdevel-repl-perl
RUN gem install pry

RUN wget -q https://packages.microsoft.com/config/ubuntu/16.04/packages-microsoft-prod.deb \
    && dpkg -i packages-microsoft-prod.deb
RUN apt-get update -y \
    && apt-get install -y powershell

WORKDIR /root

COPY homedir/* /root/

RUN chmod 600 /root/.*

# inject flag
ARG flag_name=test_name
ARG flag_value=test_value

RUN echo "${flag_name}: ${flag_value}" > /root/flag.txt

# protect from accidental overwrite
RUN chmod 400 /root/flag.txt