Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DM users upon successful discord linking #412

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

zardus
Copy link
Contributor

@zardus zardus commented May 15, 2024

This lays the groundwork for a hypothetical Discord Dojo with an actual flag challenge. Opening this PR for discussion.

Not sure how I feel about this versus just having the bot grant the White Belt role right upon linking. It's thematically nicer this way, but you can already see the potential for later phishing shenanigans once we inadvertently train users that we DM them from mysterious "pwn.college" accounts (as you can see from my warning in discord.py).

@ConnorNelson
Copy link
Member

It does sound kind of fun. My biggest worry honestly would be Discord being not thrilled with us bot-DMing users, wouldn't want the bot to get banned or something for spam. I think Discord would be more approving of a /flag command or something, that way it's a user-initiated message, but maybe I'm over thinking the Discord spam policy.

One simple way to pass the flag to the Discord bot (since it's command-processing is running unconnected to CTFd, etc) would be /flag <TOKEN>, where TOKEN is the flag encrypted and base64'd, and the secret is shared with the bot. Or we just share the flag-derivation logic and secret with the bot.

Alternatively though, maybe we don't want a challenge. Do you have to use Discord to "complete" pwn.college? I think you're probably a little silly if you don't, but I'm sure we'll have users that argue otherwise, and we don't necessarily need to require (or even strongly encourage via flags) that all users join the Discord.

Just some thoughts. I'm relatively neural.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants