grahamrogo/bludit_xss repository overview

This image is Bludit v3.13.1, which is vulnerable to a XSS attack on /admin/login. The exploit can be found here: https://www.exploit-db.com/exploits/50529⁠.

To run this container, use the following commands:

docker run --network host -dit grahamrogo/bludit_xss

Next, we need to enable the PHP server in the container: docker exec -it /bin/bash

Once in the container: cd /home/bludit-3-13-1/bludit-3-13-1/; PHP -S localhost:8000

Now you can setup the server and try out the exploit!