Resilience Challenge - Interactive Booth Experience

An interactive booth experience that captures corporate emails, runs background security simulations using GoTestWAF, and provides a "Resilience Code" for lead conversion.

Project Structure

gitex2026/
├── AttackSurface/          # Main application folder
│   ├── bin/               # Executables (GoTestWAF binary, compiled app)
│   ├── src/               # Source code (Go server, frontend)
│   │   ├── cmd/           # Go command entry points
│   │   ├── static/        # HTML/JS/CSS frontend files
│   │   ├── templates/     # Go HTML templates
│   │   ├── gotestwaf/     # GoTestWAF configuration
│   │   ├── internal/      # Internal Go packages
│   │   └── pkg/           # Public Go packages
│   ├── reports/           # GoTestWAF output reports (generated)
│   ├── logs/              # Server logs
│   ├── docs/              # Documentation (CHANGELOG.md, DEVELOPMENT_STATUS.md)
│   └── start.sh           # Server startup script
└── README.md              # This file

Tech Stack

Backend: Go (Golang) with Gin web framework
Frontend: HTML5, JavaScript, CSS
Security Testing: GoTestWAF (external binary)
Data Storage: In-memory map (volatile) for demo purposes

Features

Email Capture & Validation: POST /start endpoint with regex validation and security checks
Background Security Scan: Concurrent GoTestWAF execution with 120-second timeout
Real-time Status Tracking: Polling endpoint /scan-status/:domain for live updates
Interactive Simulation: Frontend step sequencer with animated progress visualization
Resilience Code: Static code WX-2026 displayed after simulation completion
Consultant Dashboard: Protected /admin-dashboard to monitor all scan results
Report Generation: HTML reports served at /reports/report_*.html
Graceful Shutdown: OS signal handling (SIGINT, SIGTERM) with proper cleanup

Quick Start

# Option 1: Use startup script (recommended)
cd gitex2026/AttackSurface
./start.sh

# Option 2: Manual build and run
cd AttackSurface/src
go build -o ../bin/resilience-challenge ./cmd/resilience-challenge
cd ..
./bin/resilience-challenge

# Access the application
# Frontend: http://localhost:8080 (or booth Wi-Fi IP)
# Admin dashboard: http://localhost:8080/admin-dashboard
# Reports: http://localhost:8080/reports/report_*.html

Development

Current Status

Version 0.3.0 - Production ready for Phase 5 testing. All critical bugs fixed.

Documentation

CHANGELOG.md - Version history and detailed changes
DEVELOPMENT_STATUS.md - Current status and testing results

Key Improvements in 0.3.0

Fixed GoTestWAF integration bugs causing scan failures
Enhanced security with comprehensive input validation
Added graceful shutdown with OS signal handling
Improved code quality and concurrency safety

Testing

Target Server

The application is configured to test https://git.sechpoint.app (your Wallarm-protected server in monitoring mode).

Test Flow

User submits email at booth → Domain extracted → GoTestWAF scan initiated
Real-time status updates via frontend polling (/scan-status/:domain)
HTML report generated upon completion (120-second timeout)
Consultant monitors all scans via admin dashboard

Verification

Server binds to 0.0.0.0:8080 for booth Wi-Fi accessibility
All endpoints respond correctly (frontend, API, reports)
Graceful shutdown handles SIGINT/SIGTERM signals
GoTestWAF integration uses valid flags for current version

License

Proprietary - For internal event use only.

3.8 KiB Raw Blame History