aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2025-12-17 14:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add a way to configure challenge attempt ratelimiting (#2024)

Browse Source 
* Allow submissions per minute ratelimit to be configurable
* Closes #2014
This commit is contained in:
Kevin Chung
2021-11-22 17:16:21 -05:00
committed by GitHub
parent a0783c334c
commit afb1a54e9b
3 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CTFd/api/v1/challenges.py
View File

@@ -622,7 +622,8 @@ class ChallengeAttempt(Resource):
# Anti-bruteforce / submitting Flags too quickly # Anti-bruteforce / submitting Flags too quickly
kpm = current_user.get_wrong_submissions_per_minute(user.account_id) kpm = current_user.get_wrong_submissions_per_minute(user.account_id)
if kpm > 10: kpm_limit = int(get_config("incorrect_submissions_per_min", default=10))
if kpm > kpm_limit:
if ctftime(): if ctftime():
chal_class.fail( chal_class.fail(
user=user, team=team, challenge=challenge, request=request user=user, team=team, challenge=challenge, request=request

5
CTFd/forms/config.py
View File

@@ -69,6 +69,11 @@ class AccountSettingsForm(BaseForm):
choices=[("true", "Enabled"), ("false", "Disabled")], choices=[("true", "Enabled"), ("false", "Disabled")],
default="true", default="true",
) )
incorrect_submissions_per_min = IntegerField(
"Incorrect Submissions per Minute",
widget=NumberInput(min=1),
description="Amount of submissions allowed per minute for flag bruteforce protection (default: 10)",
)
submit = SubmitField("Update") submit = SubmitField("Update")

8
CTFd/themes/admin/templates/configs/accounts.html
View File

@@ -54,6 +54,14 @@
</small> </small>
</div> </div>
<div class="form-group">
{{ form.incorrect_submissions_per_min.label }}
{{ form.incorrect_submissions_per_min(class="form-control", value=incorrect_submissions_per_min) }}
<small class="form-text text-muted">
{{ form.incorrect_submissions_per_min.description }}
</small>
</div>
<div class="form-group"> <div class="form-group">
{{ form.name_changes.label }} {{ form.name_changes.label }}
{{ form.name_changes(class="form-control custom-select") }} {{ form.name_changes(class="form-control custom-select") }}