shivammittal2403/cve-2025-57819-freepbx-rangeCyber range educativo isolato compatibile con FreePBX per CVE-2025-57819 (CWE-89/CWE-288). Laboratorio Docker — non è il FreePBX ufficiale di Sangoma.
Cyber-range didattico isolato per CVE-2025-57819 (CWE-89, CWE-288).
Applicazione di training compatibile con FreePBX — non è il FreePBX ufficiale di Sangoma.
git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range
cd cve-2025-57819-freepbx-range
cp .env.example .env
# Optional patched profile source:
cp -a target/app target/apache target/php target/scripts target-patched/
docker compose build
docker compose up -d
admin / admin)docker exec -it cve57819-attacker bashdocker compose --profile patched up -d → :8081| Servizio | Ruolo |
|---|---|
| target | GUI in stile FreePBX Apache + PHP + endpoint vulnerabile |
| database | MariaDB |
| pbx | Scheduler in allowlist |
| attacker | Workstation con strumenti |
| observer | Monitor log SOC |
| frontend | Dashboard del range |
127.0.0.1 per impostazione predefinitawrite_flag, ecc.)Vedi challenges/ — recon → auth boundary → endpoint → SQLi → DB → cron → exec → forensics → detection → remediation.
docs/STUDENT.md, docs/INSTRUCTOR.md, docs/VULNERABILITY.md, docs/ATTACK_CHAIN.md
MIT — solo per uso didattico. Vedi SECURITY.md.