Rusty Brown's Shoe Shop (vulnerable lab)
docker build . -t shoe-shop
docker run -d --rm --name shoe-shop -p 1337:3000 shoe-shop
Visit http://localhost:1337/
Valid credentials are:
[email protected] / user1
[email protected] / user2
[email protected] / user3
[email protected] / user4
[email protected] / user5
Run the following command to execute the exploit.sh script in the container:
docker exec `docker ps -aqf "name=shoe-shop"` /usr/src/app/exploit.sh
Visit http://localhost:1337/report for the write-up or check out the PDF.