
Containerized educational CTF lab emulating CVE-2026-80428 (CWE-502 deserialization) for safe, isolated student and researcher practice.
Educational emulator of CVE-2026-80428 (CWE-502: Deserialization of Untrusted Data).
This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students and security researchers.
git clone https://github.com/shivammittal2403/cve-2026-80428-ctf.git
cd cve-2026-80428-ctf
cp .env.example .env
docker compose build
docker compose up -d
Open: http://127.0.0.1:8080/
Attacker shell: docker exec -it cve80428-attacker bash
/var/www/html/drop/MIT — Educational use only. See SECURITY.md.