hacksudo/gravctf repository overview

Run a lightweight Grav CMS 1.7.48 container preconfigured for CTF challenges with a single command:

sudo docker run -d -p 8080:80 --name gravctf hacksudo/gravctf:latest

This image includes all necessary PHP extensions and setup scripts to quickly deploy a Grav-based challenge environment.

Access the challenge via http://localhost:8080⁠,

view logs with docker logs -f gravctf, or open a shell inside the container using

docker exec -it gravctf /bin/bash

Designed for security labs and testing, the container is isolated and easy to reset, making it perfect for Capture-The-Flag exercises and learning Grav vulnerabilities.

Exploit: https://www.exploit-db.com/exploits/52402⁠ Poc: https://github.com/binneko/CVE-2025-50286⁠