Skip to content

fix: CTF Makefile audit — resolve 3 critical, 4 high, 8 medium findings #154

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
t0kubetsu wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix: CTF Makefile audit — resolve 3 critical, 4 high, 8 medium findings #154

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
79 changes: 35 additions & 44 deletions 03_container_layer/docker/_ctf/cve/blank_template/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,89 +1,80 @@
#
# ISSUE 85
# ISSUE REPLACE_ME
#

SERVICE = tomcat-cve-2025-24813
SERVICE = REPLACE_ME
DEBUG_SERVICE = $(SERVICE)-debug

help:
.PHONY: help up down stop stop-debug-build build rebuild build-up rebuild-up clean term term-debug-build print

help:
@echo ""
@echo ""
@echo " Available : "
@echo ""
@echo " Available : "
@echo ""
@echo " make up - run $(SERVICE) container in background"
@echo " make up - run $(SERVICE) container in background"
@echo " make down - down $(SERVICE) "
@echo " make stop - stop $(SERVICE) "
@echo " make stop-debug-build - stop $(DEBUG_SERVICE) "
@echo ""
@echo " make build - build $(SERVICE) image"
@echo " make build-up - build $(SERVICE) image then run"
@echo " make build - build $(SERVICE) image"
@echo " make build-up - build $(SERVICE) image then run"
@echo ""
@echo " make rebuild - full rebuild $(SERVICE) without cache"
@echo " make rebuild-up - full rebuild $(SERVICE) without cache then run"
@echo " make rebuild - full rebuild $(SERVICE) without cache"
@echo " make rebuild-up - full rebuild $(SERVICE) without cache then run"
@echo ""
@echo " make term - run and open bash shell"
@echo " make term - run and open bash shell"
@echo " make term-debug-build - build get term on $(DEBUG_SERVICE) "
@echo " make clean - delete all containers, images, volumes and unused network"
@echo " make print - print this help"
@echo " make clean - delete containers, images and volumes for this service"
@echo " make print - print this help"
@echo ""
@echo ""

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

up:
docker compose up -d $(SERVICE)
down:
docker compose down $(SERVICE)
stop:
docker compose stop $(SERVICE) # stop only - main
stop:
docker compose stop $(SERVICE)

stop-debug-build :
docker compose stop $(DEBUG_SERVICE) # stop only debug
docker compose rm -sf debug
stop-debug-build:
docker compose stop $(DEBUG_SERVICE) # stop and remove debug
docker compose rm -sf $(DEBUG_SERVICE)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

build:
docker compose build
docker compose build $(SERVICE)

rebuild:
docker compose down
docker compose build --no-cache
docker compose build --no-cache $(SERVICE)

# # # # # # # # # # # #
# # # # # # # # # # # #

build-up:
docker compose build
docker compose up -d
docker compose build $(SERVICE)
docker compose up -d $(SERVICE)

rebuild-up:
docker compose down
docker compose build --no-cache
docker compose up -d
docker compose build --no-cache $(SERVICE)
docker compose up -d $(SERVICE)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

clean:
docker system prune -a --volumes -f
-docker stop $(shell docker ps -aq) # stop all containers
-docker rm -f $(shell docker ps -aq) # delete all containers
-docker rmi -f $(shell docker images -q) # delete all images
-docker volume rm -f $(shell docker volume ls -q) # delete all volumes
-docker network prune -f # docker unused network int
clean:
docker compose down --rmi all --volumes --remove-orphans

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

term:
docker exec -it $(SERVICE) /bin/bash

term-debug-build:
# docker compose down
# -docker stop $(shell docker ps -aq) # stop all containers
# -docker rm -f $(shell docker ps -aq) # delete all containers
# -docker rmi -f $(shell docker images -q) # delete all images
# -docker volume rm -f $(shell docker volume ls -q) # delete all volumes


docker compose up --build -d debug
docker compose up --build -d $(DEBUG_SERVICE)
docker exec -it $(DEBUG_SERVICE) /bin/bash

print: help
77 changes: 34 additions & 43 deletions 03_container_layer/docker/_ctf/cve/crypto/openssl/CVE-2014-0160/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,89 +1,80 @@
#
# ISSUE 50
# ISSUE 50
#

SERVICE = crypto-openssl-cve-2014-0160
DEBUG_SERVICE = $(SERVICE)-debug

help:
.PHONY: help up down stop stop-debug-build build rebuild build-up rebuild-up clean term term-debug-build print

help:
@echo ""
@echo ""
@echo " Available : "
@echo ""
@echo " Available : "
@echo ""
@echo " make up - run $(SERVICE) container in background"
@echo " make up - run $(SERVICE) container in background"
@echo " make down - down $(SERVICE) "
@echo " make stop - stop $(SERVICE) "
@echo " make stop-debug-build - stop $(DEBUG_SERVICE) "
@echo ""
@echo " make build - build $(SERVICE) image"
@echo " make build-up - build $(SERVICE) image then run"
@echo " make build - build $(SERVICE) image"
@echo " make build-up - build $(SERVICE) image then run"
@echo ""
@echo " make rebuild - full rebuild $(SERVICE) without cache"
@echo " make rebuild-up - full rebuild $(SERVICE) without cache then run"
@echo " make rebuild - full rebuild $(SERVICE) without cache"
@echo " make rebuild-up - full rebuild $(SERVICE) without cache then run"
@echo ""
@echo " make term - run and open bash shell"
@echo " make term - run and open bash shell"
@echo " make term-debug-build - build get term on $(DEBUG_SERVICE) "
@echo " make clean - delete all containers, images, volumes and unused network"
@echo " make print - print this help"
@echo " make clean - delete containers, images and volumes for this service"
@echo " make print - print this help"
@echo ""
@echo ""

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

up:
docker compose up -d $(SERVICE)
down:
docker compose down $(SERVICE)
stop:
docker compose stop $(SERVICE) # stop only - main
stop:
docker compose stop $(SERVICE)

stop-debug-build :
docker compose stop $(DEBUG_SERVICE) # stop only debug
docker compose rm -sf debug
stop-debug-build:
docker compose stop $(DEBUG_SERVICE) # stop and remove debug
docker compose rm -sf $(DEBUG_SERVICE)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

build:
docker compose build
docker compose build $(SERVICE)

rebuild:
docker compose down
docker compose build --no-cache
docker compose build --no-cache $(SERVICE)

# # # # # # # # # # # #
# # # # # # # # # # # #

build-up:
docker compose build
docker compose up -d
docker compose build $(SERVICE)
docker compose up -d $(SERVICE)

rebuild-up:
docker compose down
docker compose build --no-cache
docker compose up -d
docker compose build --no-cache $(SERVICE)
docker compose up -d $(SERVICE)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

clean:
docker system prune -a --volumes -f
-docker stop $(shell docker ps -aq) # stop all containers
-docker rm -f $(shell docker ps -aq) # delete all containers
-docker rmi -f $(shell docker images -q) # delete all images
-docker volume rm -f $(shell docker volume ls -q) # delete all volumes
-docker network prune -f # docker unused network int
clean:
docker compose down --rmi all --volumes --remove-orphans

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

term:
docker exec -it $(SERVICE) /bin/bash

term-debug-build:
# docker compose down
# -docker stop $(shell docker ps -aq) # stop all containers
# -docker rm -f $(shell docker ps -aq) # delete all containers
# -docker rmi -f $(shell docker images -q) # delete all images
# -docker volume rm -f $(shell docker volume ls -q) # delete all volumes


docker compose up --build -d debug
docker compose up --build -d $(DEBUG_SERVICE)
docker exec -it $(DEBUG_SERVICE) /bin/bash

print: help
77 changes: 34 additions & 43 deletions 03_container_layer/docker/_ctf/cve/crypto/openssl/CVE-2022-0778/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,89 +1,80 @@
#
# ISSUE 51
# ISSUE 51
#

SERVICE = crypto-openssl-cve-2022-0778
DEBUG_SERVICE = $(SERVICE)-debug

help:
.PHONY: help up down stop stop-debug-build build rebuild build-up rebuild-up clean term term-debug-build print

help:
@echo ""
@echo ""
@echo " Available : "
@echo ""
@echo " Available : "
@echo ""
@echo " make up - run $(SERVICE) container in background"
@echo " make up - run $(SERVICE) container in background"
@echo " make down - down $(SERVICE) "
@echo " make stop - stop $(SERVICE) "
@echo " make stop-debug-build - stop $(DEBUG_SERVICE) "
@echo ""
@echo " make build - build $(SERVICE) image"
@echo " make build-up - build $(SERVICE) image then run"
@echo " make build - build $(SERVICE) image"
@echo " make build-up - build $(SERVICE) image then run"
@echo ""
@echo " make rebuild - full rebuild $(SERVICE) without cache"
@echo " make rebuild-up - full rebuild $(SERVICE) without cache then run"
@echo " make rebuild - full rebuild $(SERVICE) without cache"
@echo " make rebuild-up - full rebuild $(SERVICE) without cache then run"
@echo ""
@echo " make term - run and open bash shell"
@echo " make term - run and open bash shell"
@echo " make term-debug-build - build get term on $(DEBUG_SERVICE) "
@echo " make clean - delete all containers, images, volumes and unused network"
@echo " make print - print this help"
@echo " make clean - delete containers, images and volumes for this service"
@echo " make print - print this help"
@echo ""
@echo ""

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

up:
docker compose up -d $(SERVICE)
down:
docker compose down $(SERVICE)
stop:
docker compose stop $(SERVICE) # stop only - main
stop:
docker compose stop $(SERVICE)

stop-debug-build :
docker compose stop $(DEBUG_SERVICE) # stop only debug
docker compose rm -sf debug
stop-debug-build:
docker compose stop $(DEBUG_SERVICE) # stop and remove debug
docker compose rm -sf $(DEBUG_SERVICE)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

build:
docker compose build
docker compose build $(SERVICE)

rebuild:
docker compose down
docker compose build --no-cache
docker compose build --no-cache $(SERVICE)

# # # # # # # # # # # #
# # # # # # # # # # # #

build-up:
docker compose build
docker compose up -d
docker compose build $(SERVICE)
docker compose up -d $(SERVICE)

rebuild-up:
docker compose down
docker compose build --no-cache
docker compose up -d
docker compose build --no-cache $(SERVICE)
docker compose up -d $(SERVICE)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

clean:
docker system prune -a --volumes -f
-docker stop $(shell docker ps -aq) # stop all containers
-docker rm -f $(shell docker ps -aq) # delete all containers
-docker rmi -f $(shell docker images -q) # delete all images
-docker volume rm -f $(shell docker volume ls -q) # delete all volumes
-docker network prune -f # docker unused network int
clean:
docker compose down --rmi all --volumes --remove-orphans

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

term:
docker exec -it $(SERVICE) /bin/bash

term-debug-build:
# docker compose down
# -docker stop $(shell docker ps -aq) # stop all containers
# -docker rm -f $(shell docker ps -aq) # delete all containers
# -docker rmi -f $(shell docker images -q) # delete all images
# -docker volume rm -f $(shell docker volume ls -q) # delete all volumes


docker compose up --build -d debug
docker compose up --build -d $(DEBUG_SERVICE)
docker exec -it $(DEBUG_SERVICE) /bin/bash

print: help
Loading