ns-projects-unina/ctf_cve_dsp_1Una CTF, in formato DSP-compliant, basata sulla CVE-2025-29927 di nextjs.
Welcome to Vuln Gallery, an intermediate-level Linux-based CTF (Capture The Flag).
This challenge will guide you from the initial exploitation of a modern web application to privilege escalation on a misconfigured Linux system. Your mission is to exploit the vulnerabilities, move laterally through the system, and gain full control.
This project uses Docker and Docker Compose for a quick and consistent setup. You just need to have them installed.
Clone this repository (or download the zip file of the player-deploy folder).
Open a terminal and navigate to the player-deploy directory:
cd player-deploy
Start the machine in the background with the following command:
docker-compose up -d
Docker will download the machine image and start it.
The CTF machine is now running and reachable at the following static IP address:
Start your reconnaissance phase from here.
Your goal is to find and read two flags on the system:
user.txt: Gain access as a user.root.txt: Escalate your privileges to root.When you're done, you can stop and remove the container with a single command from the player-deploy directory:
docker-compose down
This machine was designed for educational and cybersecurity training purposes. All vulnerabilities are intentional. Please run it in an isolated network environment.
Happy hunting and have fun hacking! 🕵️♂️