cookiefarm 1.0.2

Python decorator for parallel exploit dispatch in Attack & Defense CTFs using the CookieFarm framework.

🍪 CookieFarm - Exploiter Manager

Python decorator for automating exploit execution in CTF Attack & Defense competitions

---

📦 What is it?

This package provides a @exploit_manager decorator designed to automate the parallel execution of exploits in CTF (Attack & Defense) settings, specifically for use with the CookieFarm project.

It handles:

• Authentication with the central server
• Retrieving team configuration
• Asynchronous dispatch of exploits to multiple targets
• Automatic flag parsing from stdout

⚠️ Note: This package is not standalone. It must be used together with the CookieFarm client. The client provides the required APIs and team configurations.

---

📦 Installation

To install the package:

pip install cookiefarm-exploiter

⚙️ How it works

The @exploit_manager decorator takes care of:

• Calling your exploit(ip, port, name_service) function
• Capturing your exploit's stdout
• Parsing flags via regex
• Logging the result in JSON format, including: team ID, port, service name, and the flag found

All of this is done in parallel using asyncio and ThreadPoolExecutor, making the process extremely efficient, even with dozens of teams.

---

🚀 Example usage

from cookiefarm_exploiter import exploit_manager
import requests

@exploit_manager
def exploit(ip, port, name_service):
    # Run your exploit here
    response = requests.get(f"http://{ip}:{port}/")

    # Just print the flag to stdout
    print(response.text)

# Run from the command line with arguments from CookieFarm
# python3 myexploit.py <ip_server> <password> <tick_time> <thread_number> <port> <name_service>

For execution, you have to pass the required arguments from the command line, which are provided by the CookieFarm client. The decorator will handle the rest.

python3 myexploit.py <server_address> <tick_time> <thread_number> <port> <name_service>

Where:

• <server_address>: The address of the CookieFarm server
• <tick_time>: The time interval for the exploit to run
• <thread_number>: The number of threads to use for parallel execution
• <port>: The port of the service to exploit
• <name_service>: The name of the service being exploited

---

🛠️ Requirements

• Python ≥ 3.12
• Working CookieFarm client installed

---

📝 License

Distributed under the MIT License. Feel free to use, modify, and contribute.

---

For any questions, suggestions, or issues, feel free to open a GitHub issue!

Created with ❤️ by ByteTheCookies (feat. @0xMatte)