RootTheBox icon indicating copy to clipboard operation
RootTheBox copied to clipboard

Enhancement: Protected flags

Open x0341 opened this issue 4 years ago • 1 comments

Although common sense dictates that flags should be processed with a one-way function, similarly to how passwords are usually stored, RTB does not support this feature.

Protected flags work like in the real world - where normally things (e.g. the flags) are protected.

Some other platforms check whether flags are correct by calling a script specific to each challenge. The script could be configured to check against a protected flag....

x0341 avatar Mar 01 '20 17:03 x0341

I expect this would prevent the ability of the admin to edit the token or to see what the actual answer is, right? Couldn't the admin do this themselves by making their token a hash? Not sure I understand the request.

eljeffeg avatar Mar 01 '20 18:03 eljeffeg