diff --git a/vuln_rfi/Dockerfile b/vuln_rfi/Dockerfile
new file mode 100644
index 0000000..5126cc7
--- /dev/null
+++ b/vuln_rfi/Dockerfile
@@ -0,0 +1,5 @@
+FROM php:alpine3.19
+COPY src /src
+WORKDIR /src
+EXPOSE 80
+CMD ["php", "-S", "0.0.0.0:80"]
\ No newline at end of file
diff --git a/vuln_rfi/build.sh b/vuln_rfi/build.sh
new file mode 100755
index 0000000..e2ebf35
--- /dev/null
+++ b/vuln_rfi/build.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+sudo docker build -t pierre42100/gns3-appliance-vuln-rfi .
\ No newline at end of file
diff --git a/vuln_rfi/src/about.txt b/vuln_rfi/src/about.txt
new file mode 100644
index 0000000..a7cd24e
--- /dev/null
+++ b/vuln_rfi/src/about.txt
@@ -0,0 +1 @@
+I am an old and accustomed developer who wrote too much source code in my life...
\ No newline at end of file
diff --git a/vuln_rfi/src/home.txt b/vuln_rfi/src/home.txt
new file mode 100644
index 0000000..966d19e
--- /dev/null
+++ b/vuln_rfi/src/home.txt
@@ -0,0 +1,3 @@
+Welcome to this strong and almost secure website!
+
+Please use the menu below to access the different parts of the application...
\ No newline at end of file
diff --git a/vuln_rfi/src/index.php b/vuln_rfi/src/index.php
new file mode 100644
index 0000000..619c1e9
--- /dev/null
+++ b/vuln_rfi/src/index.php
@@ -0,0 +1,22 @@
+<?php
+/**
+ * My home page
+ */
+
+$page = __DIR__."home.txt";
+
+if(isset($_GET["page"]))
+    $page = $_GET["page"];
+
+?>
+
+<pre>
+<?php echo file_get_contents($page); ?>
+</pre>
+
+Browse my website:
+<ul>
+    <li><a href="index.php?page=home.txt">home</a></li>
+    <li><a href="index.php?page=about.txt">about</a></li>
+    <li><a href="index.php?page=privacy.txt">privacy</a></li>
+</ul>
\ No newline at end of file
diff --git a/vuln_rfi/src/privacy.txt b/vuln_rfi/src/privacy.txt
new file mode 100644
index 0000000..cc72971
--- /dev/null
+++ b/vuln_rfi/src/privacy.txt
@@ -0,0 +1 @@
+Privacy policy: TODO
\ No newline at end of file