This is a challenge for RabaCTF 2025.
This challenge is based on two Flask servers and GSSAPI-based Kerberos authentication. Kerberos principal registration is done with a CGI app written in C to access the kadmin API.
This challenge requires extra setup, because Kerberos realm discovery is done via DNS to ease configuration.
A DNS zone must be set up by the organizer. A script is provided to generate records for each team.
Each team's .env file must be updated such that the realm matches the domain for that specific team.