icoa-cli 2.19.29 → 2.19.30
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/ai4ctf.js +59 -5
- package/package.json +1 -1
package/dist/commands/ai4ctf.js
CHANGED
|
@@ -31,9 +31,57 @@ function drawTokenBar() {
|
|
|
31
31
|
console.log(chalk.gray(' Tokens: ') + color('█'.repeat(filled)) + chalk.gray('░'.repeat(empty)) + chalk.gray(` ${used}/${cap} (${pct}%)`));
|
|
32
32
|
}
|
|
33
33
|
const DEMO_FLAG = 'icoa{w3lc0me_2_ai4ctf}';
|
|
34
|
+
// Scripted hints for the built-in Base64 demo challenge. These mirror the
|
|
35
|
+
// three real-competition hint tiers (nudge → technique → near-answer) so
|
|
36
|
+
// the user can feel what `hint a/b/c` will be like in the actual event.
|
|
37
|
+
const DEMO_HINTS = {
|
|
38
|
+
a: [
|
|
39
|
+
'The string ends with `==` and contains only letters, digits, `+`, `/`, and `=`.',
|
|
40
|
+
'That pattern is a fingerprint — you have seen it before. Think about where `=` is used as *padding*.',
|
|
41
|
+
],
|
|
42
|
+
b: [
|
|
43
|
+
'That is **Base64**. The `==` is padding; the character set (A–Z, a–z, 0–9, +, /) confirms it.',
|
|
44
|
+
'You can decode it right in this shell — try:',
|
|
45
|
+
' !echo aWNvYXt3M2xjMG1lXzJfYWk0Y3RmfQ== | base64 -d',
|
|
46
|
+
'Or just ask the AI: "decode this for me".',
|
|
47
|
+
],
|
|
48
|
+
c: [
|
|
49
|
+
'The decoded value is `icoa{w3lc0me_2_ai4ctf}`.',
|
|
50
|
+
'Submit it with:',
|
|
51
|
+
' submit icoa{w3lc0me_2_ai4ctf}',
|
|
52
|
+
],
|
|
53
|
+
};
|
|
54
|
+
function showDemoHint(tier) {
|
|
55
|
+
const title = tier === 'a' ? t('ai4ctfHintA') : tier === 'b' ? t('ai4ctfHintB') : t('ai4ctfHintC');
|
|
56
|
+
const tierLabel = `Hint ${tier.toUpperCase()}`;
|
|
57
|
+
const color = tier === 'a' ? chalk.green : tier === 'b' ? chalk.yellow : chalk.red;
|
|
58
|
+
console.log();
|
|
59
|
+
console.log(color.bold(` ▸ ${tierLabel} `) + chalk.gray(title));
|
|
60
|
+
console.log();
|
|
61
|
+
for (const line of DEMO_HINTS[tier]) {
|
|
62
|
+
console.log(chalk.white(' ' + line));
|
|
63
|
+
}
|
|
64
|
+
console.log();
|
|
65
|
+
const nextTier = tier === 'a' ? 'b' : tier === 'b' ? 'c' : null;
|
|
66
|
+
if (nextTier) {
|
|
67
|
+
console.log(chalk.gray(` Need more? Type: `) + chalk.cyan(`hint ${nextTier}`));
|
|
68
|
+
}
|
|
69
|
+
else {
|
|
70
|
+
console.log(chalk.gray(' That is the deepest hint. Try: ') + chalk.cyan('submit icoa{w3lc0me_2_ai4ctf}'));
|
|
71
|
+
}
|
|
72
|
+
console.log();
|
|
73
|
+
}
|
|
34
74
|
export async function handleChatMessage(input) {
|
|
35
75
|
if (!chatSession)
|
|
36
76
|
return 'exit';
|
|
77
|
+
// Scripted demo hints — intercept before the AI chat so that typing
|
|
78
|
+
// `hint a` / `hint b` / `hint c` behaves like a real competition command
|
|
79
|
+
// instead of becoming a generic AI chat turn.
|
|
80
|
+
const hintMatch = input.trim().toLowerCase().match(/^hint\s+([abc])$/);
|
|
81
|
+
if (hintMatch) {
|
|
82
|
+
showDemoHint(hintMatch[1]);
|
|
83
|
+
return 'continue';
|
|
84
|
+
}
|
|
37
85
|
// Flag submission
|
|
38
86
|
const submitMatch = input.match(/^submit\s+(.+)/i);
|
|
39
87
|
if (submitMatch) {
|
|
@@ -197,13 +245,19 @@ export function registerAi4ctfCommand(program) {
|
|
|
197
245
|
console.log(chalk.gray(` ${t('ai4ctfHintCUses')}`));
|
|
198
246
|
console.log();
|
|
199
247
|
console.log(chalk.gray(' ─────────────────────────────────────────'));
|
|
200
|
-
console.log(chalk.white(
|
|
201
|
-
console.log(chalk.gray(
|
|
202
|
-
console.log(chalk.gray(
|
|
248
|
+
console.log(chalk.bold.white(' 👉 New here? Start with the hints in order:'));
|
|
249
|
+
console.log(' ' + chalk.cyan('hint a') + chalk.gray(' → nudge'));
|
|
250
|
+
console.log(' ' + chalk.cyan('hint b') + chalk.gray(' → technique'));
|
|
251
|
+
console.log(' ' + chalk.cyan('hint c') + chalk.gray(' → near-answer'));
|
|
252
|
+
console.log();
|
|
253
|
+
console.log(chalk.white(' Or chat freely with your AI teammate — ask anything'));
|
|
254
|
+
console.log(chalk.gray(' about the challenge. Example: ') + chalk.white('"what encoding is this?"'));
|
|
203
255
|
console.log();
|
|
204
256
|
console.log(chalk.yellow(` ${t('ai4ctfCommands')}`));
|
|
205
|
-
console.log(chalk.white('
|
|
206
|
-
console.log(chalk.white('
|
|
257
|
+
console.log(chalk.white(' hint a / b / c ') + chalk.gray('pre-written hints (safe to use)'));
|
|
258
|
+
console.log(chalk.white(' submit <flag> ') + chalk.gray(t('ai4ctfSubmitCmd')));
|
|
259
|
+
console.log(chalk.white(' !<shell cmd> ') + chalk.gray('run a shell command'));
|
|
260
|
+
console.log(chalk.gray(' e.g. ') + chalk.white('!echo aWNv... | base64 -d'));
|
|
207
261
|
console.log(chalk.gray(` exit ${t('ai4ctfEndSession')}`));
|
|
208
262
|
console.log();
|
|
209
263
|
drawTokenBar();
|