webex/transcriptify (#1)

* webex/transcriptify

* webex/transcriptify: convert solvepath to markdown

* webex/transcriptify: fix nonce generation

* add hints field

---------

Co-authored-by: mudasir <[email protected]>

transcriptify/Dockerfile

@@ -0,0 +1,22 @@
+FROM node:20-bookworm
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates fonts-liberation libasound2 libatk-bridge2.0-0  \
+    libatk1.0-0 libc6 libcairo2 libcups2 libdbus-1-3 libexpat1 libfontconfig1 \
+    libgbm1 libgcc1 libglib2.0-0 libgtk-3-0 libnspr4 libnss3 libpango-1.0-0 \
+    libpangocairo-1.0-0 libstdc++6 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 \
+    libxcursor1 libxdamage1 libxext6 libxfixes3 libxi6 libxrandr2 libxrender1 libxss1 \
+    libxtst6 lsb-release wget xdg-utils
+
+WORKDIR /app/server
+
+COPY ./server .
+COPY ./flag.txt ..
+
+RUN npm ci
+
+ENV NODE_ENV production
+
+EXPOSE 3000
+
+ENTRYPOINT ["npm", "start"]

transcriptify/chall.yaml

@@ -0,0 +1,19 @@
+name: Transcriptify
+categories:
+  - webex
+value: 150
+flag:
+  file: ./flag.txt
+description: |-
+  The secretaries at my school are tired of manually processing
+  transcript requests, so they've built an app to the job for them.
+  You would hope that anything handling private student info would
+  be secure, right? I hope so too.
+deploy:
+  web:
+    build: .
+    expose: 3000/tcp
+hints: []
+authors:
+  - Thomas
+visible: true

transcriptify/flag.txt

@@ -0,0 +1 @@
+bcactf{yOur_trAnSCripT_Ha5_BEeN_prOc3SS3D_1e9442f4}