Challenge Template Objects or Duplication Feature

[l4rm4nd]

GZCTF is really cool.

What's currently missing though is a feature to create challenges as template objects only within the web application. So one would create a challenge as usual, with all it needs, but does not assign it to a CTF game.

Later, if a new game is created, one can select the priorly created challenge template objects to be included in the game.

At the moment, I have one CTF game with a lot of challenges. If I create a new game, I would have to create a lot of "old" challenges again if I'd like to include them a second time. There is no game duplication feature or said challenge template objects.

Maybe a duplicate button would be a great first feature that helps a lot.

Cheers!

[GZTimeWalker]

Thanks for the recognition, but in the current design, the challenge and its status is deeply tied to the game process, and as for the challenge templates - I did consider that, but implementing a new set of front-end pages to support that would be a significant cost.

But given that you can actually achieve the same functionality by POSTing the challenge json directly to the GZCTF backend via python, there's really no need to make a new design for it - after all, it's much faster to send JSON directly to GZCTF than to set it up manually.

From this perspective, I've also seen another platform that supports formatting the description and updating of games, challenges, etc. via git repositories, which I think is a much better direction to go in, but it's a difficult goal to advance given the choice of format, protocol design, etc.

[l4rm4nd]

Alright, thanks!

POSTing the JSON is a good hint. Will work with this one.

[l4rm4nd]

Using the API was a great hint.

Quickly created a Python script to duplicate existing games and challenges.

@GZTimeWalker You can find a PR at GZCTF/game-template#1.

Just provide your GZCTF url + an admin cookie session. The script will then display existing games and prompt you for the game to duplicate. Then you can either duplicate all challenges or select individual ones. The script then creates a new game with duplicated challenges.

The new game is hidden and requires a random invitation code per default. All duplicated challenges are disabled per default. Static container flags are duplicated besides all other game/challenge info. Attachments are also duplicated. If a challenge priorly used a local asset (uploaded), we will use a "remote" url for the duplicated attachment by concatenating the GZCTF instance url with the prior asset url.

If you use --newgame, you can create a completely new game and select already existing challenges on the GZCTF platform over all games to duplicate.

You can also duplicate games and challenges across different GZCTF instances via the --dst-url and --dst-token cli params.