enowars5-service-stldoctor

STL-Analyzing A/D Service for ENOWARS5 in 2021
git clone https://git.sinitax.com/sinitax/enowars5-service-stldoctor
Log | Files | Refs | README | LICENSE | sfeed.txt

DateCommit messageAuthorFiles+-
2021-07-21 17:37final tweaks to documentations, added intro and final presentation slidesLouis Burda42+1044-21
2021-07-12 15:24removed scheduling from enochecker_test workflowLouis Burda1+0-2
2021-07-09 17:19fix cached entry check by using bytes modelnameLouis Burda1+2-2
2021-07-09 13:50check cached search functionality in noiseLouis Burda1+4-0
2021-07-09 11:32checker: fix genfile in getfile to use bin for binary filetypeLouis Burda1+1-1
2021-07-09 11:31fix github workflow ymlLouis Burda1+1-1
2021-07-09 11:28fix solidnames with # as first char from creating wrong comparisonLouis Burda1+2-2
2021-07-09 09:45update prod service files timeoutLouis Burda1+1-1
2021-07-09 07:51setup python before usage in lint github ci jobLouis Burda1+4-0
2021-07-09 07:46split github jobsLouis Burda1+11-6
2021-07-09 07:39various improvements to logging and performanceLouis Burda4+226-236
2021-07-09 00:23updated service upload scriptLouis Burda1+2-1
2021-07-09 00:21moved local check start out of checker folder, merged havocids into fakeid and created extra type of id which is only lower alphanumericLouis Burda3+29-24
2021-07-08 19:43bump enochecker, remove old stls, replace solidname in file for havoc 15Louis Burda7+162-947
2021-07-08 14:38use usual random ids for modelname and solidname in havoc 15, various smaller fixesLouis Burda8+336-336
2021-07-08 10:52fix checker formattingLouis Burda1+2-2
2021-07-08 10:50make ncat invocation easier to understand and fix listen portLouis Burda2+3-2
2021-07-08 10:37replaced socat with ncat and small fixesLouis Burda4+9-7
2021-07-08 10:22add authorization check to list as well so that second exploit cant be used for first flagstoreLouis Burda3+32-12
2021-07-08 09:45fix fmtstr resulting size checkLouis Burda4+6-4
2021-07-08 09:29added script to host service locally on port for easier memory leak debugging and checking in/out/stderr, also made file locking / unlocking less raceyLouis Burda7+106-63
2021-07-08 08:35dont remove index files in cleaner if emptyLouis Burda1+1-6
2021-07-08 08:27run only one cleaner for main dirLouis Burda1+0-5
2021-07-08 08:17remove cleaner in Makefile clean without error if it doesnt existLouis Burda1+1-1
2021-07-08 08:13made stl parsing more robus by checking parent for each layer, added installation of normal checker requirements for linting checkLouis Burda2+21-9
2021-07-08 07:54install dependencies before running lint check for checker in github actionsLouis Burda1+6-5
2021-07-08 00:33added attackinfo and fixed other issuesLouis Burda3+109-99
2021-07-07 21:17stash before adding attack_info for fixing exploit variant 2Louis Burda13+412-175
2021-07-07 12:22added .index file for upload and searchLouis Burda4+148-100
2021-07-07 10:30bumped enochecker3 to 0.4.0Louis Burda1+1-2
2021-07-07 09:48minimized service dependencies in Dockerfile, fixed STL parsing of files with no solidname after endsolidLouis Burda4+5-4
2021-07-06 15:43bump enochecker3 and fix context messages in read callsLouis Burda2+16-20
2021-07-06 13:23use session logger in service functionsLouis Burda1+74-103
2021-07-06 13:09add logging and abstract read / write in session classLouis Burda3+123-97
2021-07-05 16:48added dockerignore to service for rebuilding in productionLouis Burda1+1-0
2021-07-05 16:43change checker name to lowercase, only cleanup every 13 min since 11 round persistence at 60s per roundLouis Burda3+4-3
2021-07-02 16:38removed faker dependency with new fakeid generationLouis Burda4+4214-70
2021-07-01 22:08refactored code to be style compliant and mostly statically typed with mypyLouis Burda8+567-523
2021-06-30 20:52refactor for enochecker3Louis Burda5+761-655
2021-06-30 11:28update motd for actual serviceLouis Burda1+2-2
2021-06-30 09:00add new havoc which uploads stl models with real objects in them for fluffLouis Burda19+3949-15
2021-06-26 12:28check hash format and added more checks to returned stlinfoLouis Burda1+44-11
2021-06-26 11:38updated documentation of hash preimage generationLouis Burda1+8-6
2021-06-26 11:28add checking of returned stl info in test_good_upload havocsLouis Burda5+93-16
2021-06-25 16:01fixed many inappropriate uses of EnoException to BrokenServiceExceptionLouis Burda1+19-19
2021-06-25 15:42updated documentationLouis Burda1+22-72
2021-06-25 15:13large refactor of checker, added more havocs to test listing and search, added motd to service welcome bannerLouis Burda15+503-278
2021-06-25 00:06improve checker exploit runtime slightlyLouis Burda1+7-13
2021-06-24 23:51fix free() of potentially uninitialized pointer and minor refactors in serviceLouis Burda8+102-98
2021-06-24 19:23refactored code for readability and keeping within 80ch limit, updated service sourceLouis Burda9+293-213
2021-06-24 17:59added more randomness to whitespace in ascii fileLouis Burda1+1-1
2021-06-24 17:34add more havocs to test stl parsingLouis Burda7+155-112
2021-06-24 10:35added ability to request mulitple files in search without restartingLouis Burda3+157-130
2021-06-24 09:32bumped enochecker to handle closed connections correctly, fixed added code that prevented exploiting flagstore 2Louis Burda4+12-8
2021-06-24 00:52various fixes made while stress-testing exploitLouis Burda10+170-117
2021-06-23 15:47Merge pull request #37 from Sinitax/mainLouis Burda2+29-7
2021-06-23 13:46fix docker-compose version and add proc limits to containersLouis Burda2+29-7
2021-06-21 21:48 change docker-compose.yml version to 2 (#35)ldruschk2+4-6
2021-06-21 21:03improve checker test logging from failsLouis Burda1+15-7
2021-06-21 21:03added nodelay to socat socket optionsLouis Burda1+2-3
2021-06-21 14:36Merge pull request #34 from Sinitax/mainLouis Burda2+5-1
2021-06-21 13:37add memory limits to docker-composeLouis Burda2+5-1
2021-06-21 12:27change gunicorn conf to fight memory consumption via leak by restarting periodicallyLouis Burda2+8-6
2021-06-21 12:23add variant to remote request to enocheckerLouis Burda1+1-1
2021-06-19 09:30src: small tweak for readabilityLouis Burda1+4-6
2021-06-15 17:09test script: clean data directory with env var flag instead of every reqLouis Burda1+3-7
2021-06-15 17:07added simple upload script to service files to help newer players and give example for automationLouis Burda1+14-0
2021-06-15 17:04add service overview slidesLouis Burda12+884-0
2021-06-14 16:07mhash: fix empty input string problem with division by 0Louis Burda3+2-1
2021-06-10 22:33fixed exploits in checker, added code for enochecker_testLouis Burda3+54-12
2021-06-10 20:57Merge pull request #25 from enowars/enochecker-testLouis Burda1+47-0
2021-06-10 20:48improved loggingLouis Burda1+14-22
2021-06-10 19:50pass hashstr to revhash more securelyLouis Burda1+1-1
2021-06-10 19:36added code to stress-test of service and search for memory leaksLouis Burda4+171-13
2021-06-10 16:27add enochecker_test CILucas Druschke1+47-0
2021-06-10 11:08bump checker version to one that support forwarding args to flaskLouis Burda2+3-2
2021-06-10 10:25set ulimit for coredump to 0 so no dumps are createdLouis Burda1+4-0
2021-06-09 10:13bump enochecker version to commit with fix for docstring assignmentLouis Burda1+1-1
2021-06-08 23:20bump enochecker to commit with timeout checksLouis Burda1+3-2
2021-06-08 22:37increased service timeout to 3 minLouis Burda1+1-1
2021-06-08 22:37fix dump() command extra newline, added new welcome messageLouis Burda6+16-6
2021-06-08 21:26improved comments in checker code, fixed possible INTERNAL_ERROR when parsing returned file idLouis Burda1+46-36
2021-06-08 17:20added debugging to checker to find what is consuming memory on testvmLouis Burda1+14-0
2021-06-01 22:10added mention of tests folder to overviewLouis Burda1+2-0
2021-06-01 22:08removed exploits from test script since already available in checkerLouis Burda3+1-77
2021-06-01 22:08improved main README overviewLouis Burda1+8-5
2021-06-01 22:05apply patches through PATCHED=1 env var during cleansrcLouis Burda5+25-47
2021-06-01 21:37update readme with flagstore 2 info and some fixesLouis Burda1+41-26
2021-05-31 19:37fix using both byte and string authstr in checker's do_auth, checked in empty data folder for serviceLouis Burda3+4-3
2021-05-31 19:29fix bug in revhash that generated false preimagesLouis Burda1+22-14
2021-05-31 18:37fixed do_auth receiving IDLouis Burda1+2-2
2021-05-31 18:24fix checker do_auth, add hashing to revhash for comparingLouis Burda2+43-9
2021-05-31 17:02checker fixes, improvements to postdbLouis Burda2+16-11
2021-05-31 12:32bump enochecker to 0.4.2Louis Burda1+1-2
2021-05-29 12:24changed repo structure and commited releease files such that default docker-compose worklow commands work in testvmLouis Burda34+126-125
2021-05-27 20:18checker: replaced pwntools in self.openconn hotfix with self.connectLouis Burda1+12-18
2021-05-27 19:58bumped enochecker and implemented exploits with minor tweaks to sourceLouis Burda11+288-85
2021-05-25 17:17change port numbers for checker and service for no collisionsLouis Burda2+2-2
2021-05-23 17:00added test command for upload custom file, various smaller changes, fixed float little-endian loadingLouis Burda4+48-6
2021-05-22 13:25fix permissions on docker container, clean up checker code a littleLouis Burda3+13-16
2021-05-22 12:55refactored checker a littleLouis Burda2+12-12
2021-05-22 12:43fix for 17e3bc8 breaking ascii kwarg parsingLouis Burda1+7-7
2021-05-22 12:25consider matching of terminator in strchr callsLouis Burda2+18-12
2021-05-21 19:09fixed catching wrong exception in querydbLouis Burda1+1-1
2021-05-21 19:09missing changes for last commitLouis Burda2+2-1
2021-05-20 17:14minor fixes: container script perms, missing free for resultdir alloc, show all leaks in testingLouis Burda1+2-2
2021-05-20 16:54fixed checker havocid to be compatible with where they were used without triggering exploitsLouis Burda2+19-19
2021-05-20 00:49implemented rest of checker functionalityLouis Burda12+274-114
2021-05-19 18:49fixed flagstore patch targets and added temp file for keeping track of safe builds without recompiling each runLouis Burda5+13-12
2021-05-19 18:42added patches for fixing each flagstoreLouis Burda2+32-0
2021-05-19 18:39added permium users, second vuln and minor fixes all aroundLouis Burda9+363-156
2021-05-19 11:48refactored service structure and added do.sh for automationLouis Burda16+65-2
2021-05-18 22:53enhanced checker functionality and minor changes / fixes in documentation and srcLouis Burda8+148-127
2021-05-18 12:45seperated modelname and solidname handlingLouis Burda8+62-41
2021-05-17 21:26added basic checker flag and noise commands, still very basic, needs randomization and havocLouis Burda11+147-289
2021-05-17 19:23renamed to STLDoctorLouis Burda6+11-11
2021-05-17 17:09amend documentationLouis Burda1+6-11
2021-05-17 17:01greatly improved information in documentation on service and exploitsLouis Burda1+178-42
2021-05-13 11:56add data dir with .keepLouis Burda2+1-0
2021-05-13 11:55added cleanup script, improved poc test, addec echo for debugging and small fixesLouis Burda10+121-21
2021-05-10 22:34made docker setup more stable + small fixesLouis Burda3+12-5
2021-05-10 16:46fixed PoC test caseLouis Burda1+0-1
2021-05-10 16:08fixed hash parsing from info file and only query non-hidden dirs in standard user modeLouis Burda3+27-9
2021-05-10 15:18extended query function to load file info, added poc testLouis Burda6+197-121
2021-05-10 13:05save scan info and model, added vuln in load info, small tweaksLouis Burda9+221-81
2021-05-09 18:12added bounding box calculationLouis Burda3+32-10
2021-05-09 10:37save hash statically, added file info output, improved error strings and minor fixesLouis Burda7+90-40
2021-05-04 09:07further improved parsing and related testsLouis Burda7+152-65
2021-05-03 21:44improved parsing for ascii stl and added sample file for testingLouis Burda6+95-36
2021-04-29 16:37fixed Makefile and extended ascii parsing structureLouis Burda3+69-7
2021-04-29 15:54very basic binary file parsing and skeleton for state-machine based parsing of ascii formatLouis Burda5+235-93
2021-04-29 14:20basic service structure and docker setupLouis Burda10+229-52
2021-04-28 08:51added sample service templates, basic service outline and moved service info to documentation dirLouis Burda17+727-69
2021-04-27 12:35updated LICENSE and moved README for displaying by githubLouis Burda2+1-1
2021-04-26 18:26service and vuln conceptLouis Burda1+72-0
2021-04-20 20:44Added MIT LicenseLouis Burda1+21-0