• Progress on the new CTF arena platform

    From ReK2 Hispagatos@rek2@usenet_reborn.tui to hispagatos.comunicados,alt.2600 on Fri Nov 28 19:56:07 2025
    From Newsgroup: alt.2600

    Arena CTF Platform - Development Status
    =======================================

    COMPLETED
    ---------

    Backend API:
    - User registration, login, email verification, password reset
    - JWT authentication with refresh tokens
    - User profiles with bio, avatar, country
    - Team system (create, join, leave, invite, kick members)
    - Machine management (CRUD, filtering by difficulty/OS/status)
    - VM instance spawning and destruction via libvirt
    - Dynamic flag generation per instance (anti-cheat)
    - Flag submission and validation with points
    - Rankings and leaderboards (global, country, teams)
    - Admin panel endpoints (user/team/machine management)
    - 40+ REST endpoints total

    Frontend:
    - Registration page
    - Login page
    - Email verification page
    - Password reset request page
    - Password reset page
    - Basic routing and auth state management

    Infrastructure:
    - KVM/libvirt VM management (spawn, stop, cleanup)
    - QCOW2 copy-on-write disk overlays
    - WireGuard VPN peer management
    - VPN config file generation
    - Separate networks for free/VIP tiers
    - PostgreSQL schema (21 tables, indexes, partitions, materialized views)

    IN DEVELOPMENT
    --------------

    Frontend Rust Yew (priority):
    - Dashboard showing user machines and progress
    - Machine browser with search/filter
    - Instance management UI (start/stop VMs)
    - Flag submission interface
    - Leaderboard display
    - User profile pages
    - Team management UI
    - Admin panel UI

    Backend Rust AXUM:
    - Background job for auto-stopping expired instances
    - Background job for disk cleanup
    - Challenges system (schema exists, routes not done)
    - Badge awarding automation
    - Activity feed population

    Infrastructure:
    - Automatic WireGuard peer cleanup on VM stop
    - VM health checks
    - Rate limiting middleware

    NOT STARTED
    -----------

    - Certificate PDF generation
    - Payment/subscription integration
    - Matrix/Fediverse chat integration
    - Machine ratings UI
    - Notifications system UI


    ALPHA TESTING
    -------------
    - Looking for testers
    - Lookking for people to do some vulnerable boxes with recent vulns, I can teach.


    Happy Hacking
    ReK2
    --- Synchronet 3.21a-Linux NewsLink 1.2