diff --git a/hidden_header/Dockerfile b/hidden_header/Dockerfile
new file mode 100644
index 0000000..86db698
--- /dev/null
+++ b/hidden_header/Dockerfile
@@ -0,0 +1,4 @@
+FROM php:8.3-apache
+COPY src/ /var/www/html/
+
+ENV FLAG=CHANGEME
\ No newline at end of file
diff --git a/hidden_header/README.md b/hidden_header/README.md
new file mode 100644
index 0000000..bd10733
--- /dev/null
+++ b/hidden_header/README.md
@@ -0,0 +1,8 @@
+# Unsafe login challenge
+You need to set the `FLAG` environment variable for this challenge to work!
+
+
+## Run the image
+```bash
+docker run --rm --name hidden_header --env FLAG='FLAG{HIDDEN_HEADER}' -p 3865:80 -it pierre42100/gns3-appliance-hidden-header
+```
\ No newline at end of file
diff --git a/hidden_header/build.sh b/hidden_header/build.sh
new file mode 100644
index 0000000..27ceac5
--- /dev/null
+++ b/hidden_header/build.sh
@@ -0,0 +1 @@
+sudo docker build -t pierre42100/gns3-appliance-hidden-header .
\ No newline at end of file
diff --git a/hidden_header/src/index.php b/hidden_header/src/index.php
new file mode 100644
index 0000000..88861bd
--- /dev/null
+++ b/hidden_header/src/index.php
@@ -0,0 +1,13 @@
+<?php
+header("Flag: ".getenv("FLAG"));
+?><!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Document</title>
+</head>
+<body>
+    <p>Hello world!</p>
+</body>
+</html>
\ No newline at end of file
