OUtbreak

index.py

import os
from auth import authenticate_user
from flask import Flask, render_template, request

FLAG = os.getenv("FLAG", "AppSec-IL{This_Is_Not_The_Flag}")
app = Flask("App")

@app.route('/')
def index():
    return render_template('login.html')

@app.route('/login', methods=['POST'])
def login():
    username = request.form['username']
    password = request.form['password']
    if password == "*":
        return render_template('login.html', error='What are you trying to do?')

    username = authenticate_user(username, password)
    if username:
        return render_template("welcome.html", username=username, flag=FLAG)
    else:
        return render_template('login.html', error='Username or password is incorrect')

if __name__ == '__main__':
    app.run(host="0.0.0.0", port=5000, debug=True)

auth.py

import os
import sys
import ldap3

SERVER = "ldap"
LDAP_SERVER = f'ldap://{SERVER}' 
LDAP_USER = os.getenv("LDAP_USER", 'cn=admin,dc=owasp,dc=ctf')
LDAP_PASSWORD = os.getenv("LDAP_PASSWORD", 'admin')
BASE_DN = os.getenv('BASE_DN', 'dc=owasp,dc=ctf')


def create_ldap_connection():
    server = ldap3.Server(LDAP_SERVER, port=1389, get_info=ldap3.ALL)
    connection = ldap3.Connection(server, user=LDAP_USER, password=LDAP_PASSWORD, auto_bind=True)
    return connection


def authenticate_user(username: str, password: str):
    connection = create_ldap_connection()
    try:
        search_filter = f"(&(cn={username})(userPassword={password}))"
        connection.search(
            search_base=BASE_DN,
            search_filter=search_filter,
            search_scope=ldap3.SUBTREE,
            attributes=['cn']
        )
        result = connection.entries
        print(result)
        if result:
            return result[0].cn.value[1]
    except Exception as e:
        print(e, file=sys.stderr)
    finally:
        connection.unbind()
    return None

docker-compose.yml

version: "3"

services:
  ldap:
    image: bitnami/openldap:latest
    environment:
      LDAP_ROOT_PASSWORD: "admin"
      LDAP_ROOT: 'dc=owasp,dc=ctf'
      LDAP_ADMIN_DN : 'cn=admin,dc=owasp,dc=ctf'
      LDAP_ADMIN_USERNAME: 'admin'
      LDAP_ADMIN_PASSWORD: 'admin'
      LDAP_USERS: 'DaGoat'
      LDAP_PASSWORDS: 'secret'
    expose:
      - '1389'

  backend:
    build: backend
    depends_on:
      - ldap
    ports:
      - "5000:5000"