diff options
Diffstat (limited to 'documentation')
| -rw-r--r-- | documentation/README.md | 23 |
1 files changed, 21 insertions, 2 deletions
diff --git a/documentation/README.md b/documentation/README.md index a4e8853..e396dcc 100644 --- a/documentation/README.md +++ b/documentation/README.md @@ -68,6 +68,24 @@ The checker checks the following behavior: - Ensure file is not listed in query - Register with previous password - Ensure file is listed in query +- Check upload ordering and accessing indeces != 0: + - Open a session + - Upload a file of random, valid contents with random model and solid name + - Upload a different file of random, valid contents with same model name but different solid name + - Open a new session + - Query for same model name and pick 1st entry + - Compare returned solid name with expected (1st upload) + - Query for same model name and pick 2nd entry + - Compare returned solid name with expected (2nd upload) + + +The checker tenets: + +- A checker SHOULD not be easily identified by the examination of network traffic + satisfied, because checker uses regular user interface and picks strings from a wordlist + to appear more human (TODO) +- A checker SHOULD use unusual, incorrect or pseudomalicious input to detect network filters + satisfied, send various garbage bytes for model name and file contents (TODO) The checker does the following to submit the first flagstore's flag: @@ -78,8 +96,9 @@ The checker does the following to submit the first flagstore's flag: The checker does the following to submit the second flagstore's flag: - Open a session -- Use `submit` to upload a file of the encoded, binary STL flag with - a random model name chosen from a wordlist with numbers for +- Register as a premium user +- Use `submit` to upload a binary STL with the flag as its solidname + and a random model name chosen from a wordlist with numbers for collision resistance The checker should not be easily identifiable, since this could allow |