Installation
dsh plugin --profile web add file:./dsh-ctf-teamCopy
dsh plugin --profile web add github:fyfhcgch/dsh-ctf-collaborateCopy
Plugins in this repository dsh-ctf-team v0.4.0 ✓
Persistent CTF collaboration board plugin for DeepSeek Harness
Official core packages (8) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/dsh-api-remotes^0.1.0-rc.6 shared @deepseek-ai/dsh-client-runtime^0.1.0-rc.6 shared @deepseek-ai/dsh-client-ui-settings^0.1.0-rc.6 shared @deepseek-ai/dsh-client-ui-slots^0.1.0-rc.6 shared @deepseek-ai/dsh-host-webserver^0.1.0-rc.5 shared @deepseek-ai/dsh-typert-protocol^0.1.0-rc.6 shared @deepseek-ai/schemastery^3.18.1 shared @dsh-external/dsh-blackboard v0.1.0 ✓
Durable global blackboard (shared memory) for CTF agents: challenge info, tool outputs, intermediate clues, failure records and candidate flags, persisted to a single JSON file and exposed through a cordis service plus event-bus interface.
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-crypto-expert v0.1.0 ✓
密码专项专家插件:认领 planner 派发的 crypto 计划子任务(recon/analysis/exploit),内置离线算法识别与求解器(编码解码、单/多字节 XOR 爆破、凯撒/ROT/维吉尼亚启发、RSA 小整数攻击与 p/q/e 解密),产出经 ctx.blackboard 写入 clues/tool_outputs/candidate_flags,异常写入 failures,并经 ctx.planner 回报任务状态;支持重启断点恢复。
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-ctf-console v0.1.0 ✓
CTF 解题控制台:在 DSH Web GUI 侧边栏/会话头部提供入口,右侧独立面板查看题目列表、详情、靶机端点、启动/回收环境、提交 flag。Host 经 webServer 前缀路由 /api/ctf-console/* 提供后端,用全局 fetch 调用 CTF 平台 API(X-Agent-AccessKey 认证)。
Official core packages (1) @deepseek-ai/cordis^4.0.1 shared @dsh-external/dsh-docker-sandbox v0.1.0 ✓
External Docker sandbox execution service for CTF agents: runs arbitrary commands/scripts inside disposable containers through the Docker Engine API over HTTP/socket/named-pipe — never a local shell — and records every run durably through the blackboard service. Built as a dsh-harness cordis bundle plugin.
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-misc-expert v0.1.0 ✓
杂项专项专家插件:认领 planner 派发的 misc 计划子任务(recon/analysis/exploit),内置离线编码解码、隐写初检(零宽字符/大小写位/首字母)、文本转换(二进制/十进制/十六进制/八进制/反转/摩斯/培根)与求解管线,产出经 ctx.blackboard 写入 clues/tool_outputs/candidate_flags,异常写入 failures,并经 ctx.planner 回报任务状态;支持重启断点恢复。
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-planner v0.1.0 ✓
Planner master-scheduling agent plugin for CTF: receives challenge input via the cordis event bus, decomposes it into a CoT-style DAG of subtasks, schedules execution with timeouts/retries/failure handling, and persists every task, intermediate result, failure and candidate flag through the blackboard service (ctx.blackboard). Supports checkpoint resume after harness restarts.
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-submit-gateway v0.1.0 ✓
HTTP 提交网关:注册 POST /api/ctf/submit,接收 plan.submit 格式 JSON(planId/category/title/description/ciphertext/attachments...),内部调用 ctx.planner.start 发起计划,使外部 PowerShell/curl 可直接提交 CTF 题目进入多 Agent 工作流。
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-verifier v0.1.0 ✓
Verifier flag 校验插件:监听 blackboard 的 candidate_flags 分区,自动抓取候选 flag 做格式校验/垃圾过滤/去重,本地模拟校验 + 预留外部提交接口,结果写回 blackboard(verified/verify_msg),失败与格式错误写入 failures,并通过 planner 联动完成任务/失败计划。硬性依赖 blackboard + planner 服务。
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy @dsh-external/dsh-web-expert v0.1.0 ✓
Web 专项专家插件:认领 planner 派发的 recon/audit/exploit 阶段 web 子任务,内置字典目录爆破、备份/源码泄露审计、SQLi/LFI/SSTI payload 集合与站点指纹规则(全部固化源码、离线运行),执行产出经 ctx.blackboard 写入 clues/tool_outputs/candidate_flags,异常写入 failures,并通过 ctx.planner 回报任务状态;支持重启断点恢复。
Official core packages (2) @deepseek-ai/cordis^4.0.1 shared @deepseek-ai/schemastery^3.18.1 private copy Paths are pinned to commit de7bd9e59bbc
Overview 为 DeepSeek Harness 提供多人 CTF 题目管理、共享笔记、Agent 任务和证据整理能力
Repository check result Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.
Static repository check Sep 1, 2026, 5:41 AM Medium risk
Evidence Score 66/100
Static risk Medium risk
Files scanned 21
Findings 8 Evidence breakdown Source provenance 17/25
Install documentation 25/25
Maintenance 12/20
Compatibility evidence 5/20
Security signals 7/10
Compatibility confidence: Limited
Findings (8) Not run Dependency advisory database scan Installation execution test Runtime behavior verification Scanner 1.0.0 · Scorer 1.0.0