Skip to main content

Python decorator for parallel exploit dispatch in Attack & Defense CTFs using the CookieFarm framework.

Project description

🍪 CookieFarm - Exploiter Manager

Language Keywords License

Python decorator for automating exploit execution in CTF Attack & Defense competitions


📦 What is it?

This package provides a @exploit_manager decorator designed to automate the parallel execution of exploits in CTF (Attack & Defense) settings, specifically for use with the CookieFarm project.

It handles:

  • Authentication with the central server
  • Retrieving team configuration
  • Automatic flag parsing from stdout

⚠️ Note: This package is not standalone. It must be used together with the CookieFarm client. The client provides the required APIs and team configurations.


📦 Installation

To install the package:

pip install cookiefarm

⚙️ How it works

The @exploit_manager decorator takes care of:

  • Calling your exploit(ip, port, name_service) function
  • Capturing your exploit's stdout
  • Parsing flags via regex
  • Logging the result in JSON format, including: team ID, port, service name, and the flag found

🚀 Example usage

from cookiefarm_exploiter import exploit_manager
import requests

@exploit_manager
def exploit(ip, port, name_service):
    # Run your exploit here
    response = requests.get(f"http://{ip}:{port}/")

    # Just print the flag to stdout
    print(response.text)

# Run from the command line with arguments from CookieFarm
# python3 myexploit.py <ip_server> <password> <tick_time> <thread_number> <port> <name_service>

For execution, you have to pass the required arguments from the command line, which are provided by the CookieFarm client. The decorator will handle the rest.

python3 myexploit.py <server_address> <tick_time> <thread_number> <port> <name_service>

Where:

  • <server_address>: The address of the CookieFarm server
  • <tick_time>: The time interval for the exploit to run
  • <thread_number>: The number of threads to use for parallel execution
  • <port>: The port of the service to exploit
  • <name_service>: The name of the service being exploited

🛠️ Requirements

  • Python ≥ 3.12
  • Working CookieFarm client installed

📝 License

Distributed under the MIT License. Feel free to use, modify, and contribute.


For any questions, suggestions, or issues, feel free to open a GitHub issue!

Created with ❤️ by ByteTheCookies (feat. @0xMatte)

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cookiefarm-1.0.3.tar.gz (9.3 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cookiefarm-1.0.3-py3-none-any.whl (9.3 MB view details)

Uploaded Python 3

File details

Details for the file cookiefarm-1.0.3.tar.gz.

File metadata

  • Download URL: cookiefarm-1.0.3.tar.gz
  • Upload date:
  • Size: 9.3 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.13.3

File hashes

Hashes for cookiefarm-1.0.3.tar.gz
Algorithm Hash digest
SHA256 20e13f9a707f5aabe0fab7c02fa2ab53b1ab3bbddbb9eb52427917841b32ad4e
MD5 639787aeb8fa97d85e08ffab29a2a21a
BLAKE2b-256 2355238e3e1da6acc1dc78196a1e71a096b91ecd4975963164391d84e80db3a4

See more details on using hashes here.

File details

Details for the file cookiefarm-1.0.3-py3-none-any.whl.

File metadata

  • Download URL: cookiefarm-1.0.3-py3-none-any.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.13.3

File hashes

Hashes for cookiefarm-1.0.3-py3-none-any.whl
Algorithm Hash digest
SHA256 3981e2b8e9aa7c14de5521250453bd0f57defbc7dd51a3aeca0a3521a35ffb7e
MD5 382e9de6f9572b9423bda46856469669
BLAKE2b-256 8b30bce8a4012255b28bc391bc4a135774615a3a942666e333bee3472a52b74a

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page