Fixes by format action

flags.py

@@ -1,27 +1,22 @@
-stages = { # Sample dictionary with flags and multiple hints 
+stages = {  # Sample dictionary with flags and multiple hints
     1: {
         "flag": "flag{stage1}",
         "hints": [
             "This is the least revealing hint for stage 1.",
             "This is a more revealing hint for stage 1.",
-            "This is the most revealing hint for stage 1."
-        ]
+            "This is the most revealing hint for stage 1.",
+        ],
     },
     2: {
         "flag": "flag{stage2}",
         "hints": [
             "This is the least revealing hint for stage 2.",
             "This is a more revealing hint for stage 2.",
-            "This is the most revealing hint for stage 2."
-        ]
+            "This is the most revealing hint for stage 2.",
+        ],
     },
-    3: {
-        "flag": "flag{stage3}",
-        "hints": [
-            "Almost there"
-        ]
-    }
+    3: {"flag": "flag{stage3}", "hints": ["Almost there"]},
 }
 
 # if __name__ == "__main__":
-#     print(stages)
+#     print(stages)

hints/__init__.py

@@ -1,5 +1,10 @@
 from flask import Flask
-# from ctf.error_handlers import register_error_handlers  # Adjust the import based on your project structure
+
+from hints import routes
+
+# from ctf.error_handlers import register_error_handlers  # Adjust the
+# import based on your project structure
+
 
 def create_app():
     app = Flask(
@@ -9,19 +14,24 @@ def create_app():
         template_folder="templates",
     )
     app.config["SECRET_KEY"] = "CTF_K3YF0RS355i0n5!"
-        # ensure session cookie is httponly
+    # ensure session cookie is httponly
     app.config["SESSION_COOKIE_HTTPONLY"] = True
     # ensure session cookie is same site
     app.config["SESSION_COOKIE_SAMESITE"] = "Strict"
-    app.config["REMEMBER_COOKIE_SECURE"] = True  # ensure remember cookie is secure
-    app.config["SESSION_COOKIE_SECURE"] = True  # ensure session cookie is secure
+    # ensure remember cookie is secure
+    app.config["REMEMBER_COOKIE_SECURE"] = True
+    # ensure session cookie is secure
+    app.config["SESSION_COOKIE_SECURE"] = True
 
     with app.app_context():
         from . import routes
+
         app.register_blueprint(routes.bp)
     # register_error_handlers(app)
     # app.config['referrer_policy'] = 'strict-origin-when-cross-origin'
     return app
+
+
 # app = Flask(
 #     __name__,
 #     static_folder="static",
@@ -32,5 +42,3 @@ def create_app():
 
 # register_error_handlers(app)
 # app.config['referrer_policy'] = 'strict-origin-when-cross-origin'
-
-from hints import routes

hints/routes.py

@@ -1,116 +1,147 @@
-from flask import Blueprint, render_template, request, redirect, url_for, flash, make_response, session
 import datetime
+
+from flask import (Blueprint, flash, make_response, redirect, render_template,
+                   request, session, url_for)
+
 from flags import stages  # import everything from flags.py
-bp = Blueprint('ctf', __name__)
+
+bp = Blueprint("ctf", __name__)
 
 current_stage = 1
 hint_index = 0
 
-@bp.route('/flags', methods=['GET', 'POST'])
-@bp.route('/flags.html', methods=['GET', 'POST'])
+
+@bp.route("/flags", methods=["GET", "POST"])
+@bp.route("/flags.html", methods=["GET", "POST"])
 def flags():
     global current_stage, hint_index
     # initialize session variables
     if "submitted_flags" not in session:
-        session['submitted_flags'] = []
+        session["submitted_flags"] = []
     if "current_stage" not in session:
-        session['current_stage'] = 1
-
-    current_stage = session['current_stage']
-    submitted_flags = session['submitted_flags']
-    # need to verify that the user didn't try to skip stages or trick the system
-
-    if request.method == 'POST':
-        if 'submit_flag' in request.form:
-            submitted_flag = request.form.get('flag')
-            if submitted_flag == stages[current_stage]['flag']:
-                flash(f"Correct flag for Stage {current_stage}!", 'success')
+        session["current_stage"] = 1
+
+    current_stage = session["current_stage"]
+    submitted_flags = session["submitted_flags"]
+    # need to verify that the user didn't try to skip stages or trick the
+    # system
+
+    if request.method == "POST":
+        if "submit_flag" in request.form:
+            submitted_flag = request.form.get("flag")
+            if submitted_flag == stages[current_stage]["flag"]:
+                flash(f"Correct flag for Stage {current_stage}!", "success")
                 submitted_flags.append(submitted_flag)
-                session['submitted_flags'] = submitted_flags
+                session["submitted_flags"] = submitted_flags
                 if current_stage < len(stages):
                     current_stage += 1
                     hint_index = 0
                 elif current_stage == len(stages):
-                    flash("You have completed all the stages. Congratulations!", 'success')
-                    # if the user has completed all the stages, then flash a message
-                session['current_stage'] = current_stage
+                    flash(
+                        "You have completed all the stages. Congratulations!",
+                        "success")
+                    # if the user has completed all the stages, then flash a
+                    # message
+                session["current_stage"] = current_stage
             else:
                 found = False
-                # if the flag is for a different stage, then put them on their stage
+                # if the flag is for a different stage, then put them on their
+                # stage
                 for stage, stage_data in stages.items():
-                    if submitted_flag == stage_data['flag']:
-                        flash(f"That's the flag for stage {stage}, but in the wrong order", 'info')
+                    if submitted_flag == stage_data["flag"]:
+                        flash(
+                            f"That's the flag for stage {stage}, but in the wrong order", "info", )
                         current_stage = stage
                         hint_index = 0
                         found = True
                         break
                 # else:
                 if not found:
-                    flash("Incorrect flag. Try again.", 'danger')
-
-        elif 'reveal_hint' in request.form:
-            if hint_index < len(stages[current_stage]['hints']) - 1: # if there are more hints to reveal
+                    flash("Incorrect flag. Try again.", "danger")
+
+        elif "reveal_hint" in request.form:
+            if (
+                hint_index < len(stages[current_stage]["hints"]) - 1
+            ):  # if there are more hints to reveal
                 hint_index += 1
             else:
-                # if the user exhausted all the hints, have it show from the beginning
+                # if the user exhausted all the hints, have it show from the
+                # beginning
                 hint_index = 0
                 # flash a message to the user
-                
-                flash("No new hints :( Try harder!", 'info')
+
+                flash("No new hints :( Try harder!", "info")
                 # hide the button till they get to next stage
-
-    hints = stages[current_stage]['hints'][:hint_index + 1]
-    return render_template('flags.html', stage=current_stage, hints=hints, hint_index=hint_index, submitted_flags=submitted_flags, num_hints=len(stages[current_stage]['hints']))
 
+    hints = stages[current_stage]["hints"][: hint_index + 1]
+    return render_template(
+        "flags.html",
+        stage=current_stage,
+        hints=hints,
+        hint_index=hint_index,
+        submitted_flags=submitted_flags,
+        num_hints=len(stages[current_stage]["hints"]),
+    )
 
-@bp.route('/', methods=['GET']) # also for index
-@bp.route('/index', methods=['GET'])
-@bp.route('/home', methods=['GET'])
-@bp.route('/index.html', methods=['GET'])
+
+@bp.route("/", methods=["GET"])  # also for index
+@bp.route("/index", methods=["GET"])
+@bp.route("/home", methods=["GET"])
+@bp.route("/index.html", methods=["GET"])
 def index():
-     # initialize session variables
+    # initialize session variables
     if "submitted_flags" not in session:
-        session['submitted_flags'] = []
+        session["submitted_flags"] = []
     if "current_stage" not in session:
-        session['current_stage'] = 1
-        
-    flash("Welcome to the CTF, please read the following:", 'info')
+        session["current_stage"] = 1
+
+    flash("Welcome to the CTF, please read the following:", "info")
     brief = """
     This site is not required to solve the CTF challenge and is not a part of the CTF challenge itself, but a tool to help you keep track of your progress. The flags are not hidden on this site. You need to find them on your own. Good luck!
 
     \n
-    Do not use this site for any illegal activities, please do not attack it in any way as it harms other users who are solving the CTF. The site collects logs for security purposes. 
+    Do not use this site for any illegal activities, please do not attack it in any way as it harms other users who are solving the CTF. The site collects logs for security purposes.
     \n
     """
     # everwhere where is /n, replace with <br> for html
-    brief = brief.split('\n')
-
-    return render_template('index.html', summary=brief)
-
-@bp.route('/restart', methods=['GET'])
-@bp.route('/restart.html', methods=['GET'])
-@bp.route('/reset', methods=['GET'])
-@bp.route('/reset.html', methods=['GET'])
+    brief = brief.split("\n")
+
+    return render_template("index.html", summary=brief)
+
+
+@bp.route("/restart", methods=["GET"])
+@bp.route("/restart.html", methods=["GET"])
+@bp.route("/reset", methods=["GET"])
+@bp.route("/reset.html", methods=["GET"])
 def restart():
     session.clear()
-    flash("Progress reset. You are back to Stage 1.", 'info')
+    flash("Progress reset. You are back to Stage 1.", "info")
     # reroute to index
-    return redirect(url_for('ctf.index'))
+    return redirect(url_for("ctf.index"))
+
 
 # error pages
 @bp.app_errorhandler(404)
 def page_not_found(error):
-    return render_template('404.html'), 404
+    return render_template("404.html"), 404
+
 
 # nice page for anything else using message.html and return 500
 @bp.app_errorhandler(500)
 def internal_server_error(error):
-    return render_template('message.html', title="500 Internal Server Error", message="Please try again later"), 500
+    return (
+        render_template(
+            "message.html",
+            title="500 Internal Server Error",
+            message="Please try again later",
+        ),
+        500,
+    )
 
 
 @bp.context_processor
 def inject_today_date():
     """
     used for the footer to display the current year
     """
-    return {'year': datetime.date.today().year}
+    return {"year": datetime.date.today().year}

run.py

@@ -6,5 +6,5 @@
 
 if __name__ == "__main__":
     # app.run(debug=True, port="5000") #debug ,
-    
+
     app.run(debug=True, host="0.0.0.0", port=8080)  # production