pierre/gns3-docker-appliances
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create "beautiful" version of RFI challenge

Browse Source
This commit is contained in:
Pierre HUBERT 2025-01-31 15:55:35 +01:00
parent fd6123e72c
commit 4bb232c3ce
9 changed files with 95 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
beautiful_vuln_rfi/Dockerfile Normal file
View File

@ -0,0 +1,3 @@
FROM php:8-apache-bullseye
COPY src /var/www/html
EXPOSE 80

8
beautiful_vuln_rfi/README.md Normal file
View File

@ -0,0 +1,8 @@
# Unsafe gallery challenge
You need to set the `FLAG` environment variable for this challenge to work!
## Run the image
```bash
docker run --rm --name unsafe_login --env FLAG='FLAG{UNSAFE_RFI}' -p 3578:80 -it pierre42100/gns3-appliance-beautiful-vuln-rfi
```

2
beautiful_vuln_rfi/build.sh Normal file
View File

@ -0,0 +1,2 @@
#!/bin/sh
sudo docker build -t pierre42100/gns3-appliance-beautiful-vuln-rfi .

1
beautiful_vuln_rfi/src/about.txt Normal file
View File

@ -0,0 +1 @@
I am an old and accustomed developer who wrote too much source code in his life...

7
beautiful_vuln_rfi/src/bootstrap.bundle.min.js vendored Normal file
View File

File diff suppressed because one or more lines are too long

12
beautiful_vuln_rfi/src/bootstrap.min.css vendored Normal file
View File

File diff suppressed because one or more lines are too long

3
beautiful_vuln_rfi/src/home.txt Normal file
View File

@ -0,0 +1,3 @@
Welcome to this strong and almost secure website!
Please use the menu below to access the different parts of the application...

58
beautiful_vuln_rfi/src/index.php Normal file
View File

@ -0,0 +1,58 @@
<?php
/**
* My home page
*/
$page = "home.txt";
if (isset($_GET["page"]))
$page = $_GET["page"];
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title><?= $page ?> - Beautiful RFI</title>
<link rel="stylesheet" href="/bootstrap.min.css">
</head>
<body>
<nav class="navbar navbar-expand-lg bg-dark" data-bs-theme="dark">
<div class="container-fluid">
<a class="navbar-brand" href="/">Beautiful VULN RFI</a>
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarColor02"
aria-controls="navbarColor02" aria-expanded="false" aria-label="Toggle navigation">
<span class="navbar-toggler-icon"></span>
</button>
<div class="collapse navbar-collapse" id="navbarColor02">
<ul class="navbar-nav me-auto">
<li class="nav-item">
<a class="nav-link <?= $page === "home.txt" ? "active" : "" ?>" href="/?page=home.txt">Home</a>
</li>
<li class="nav-item">
<a class="nav-link <?= $page === "about.txt" ? "active" : "" ?>" href="/?page=about.txt">About</a>
</li>
<li class="nav-item">
<a class="nav-link <?= $page === "privacy.txt" ? "active" : "" ?>" href="/?page=privacy.txt">Privacy</a>
</li>
</ul>
</div>
</div>
</nav>
<h1 class="display-4 fw-normal text-body-emphasis" style="color: white !important; text-align: center;">
<?= str_replace(".txt", "", $page) ?>
</h1>
<pre style="max-width: 700px; margin: auto;">
<?php echo file_get_contents($page); ?>
</pre>
<script src="/bootstrap.bundle.min.js"></script>
</body>
</html>

1
beautiful_vuln_rfi/src/privacy.txt Normal file
View File

@ -0,0 +1 @@
Privacy policy: TODO