Skip to main content

Automatic Flag Submissions

Traboda Arena supports automatic flag submissions, i.e. participants can get points on solving the challenge without having to manually submit a flag on the platform. For supported challenges, the authors can hide the flags from the participants and submit the flag automatically when the challenge is solved via an API call to the platform. This is not just useful for making it easier for the participants as they don't have to submit the flag manually, but can also prevent flag sharing between participants.

Guidelines for Challenge Authors​

  1. Go to the Settings tab of the challenge editor / creator page.
  2. Turn on the Automatic Flag Submission toggle button.
  3. Setup challenge deployment, if not already done. The challenge deployed should be managed by the platform.
  4. The platform will set an environment variable SUBMISSION_ENDPOINT for the challenge deployment, with a a unique URL for every contestant-challenge pair. This environment should be accessed by the challenge application.
  5. Upon solving the challenge, the challenge application should make a POST request to the SUBMISSION_ENDPOINT with the following JSON body:
    { "flag": "<FLAG_VALUE>" }

The platform will validate the flag value, log the submission, and award points to the contestant.