LabStore
← All labs

Doomsday Archiver

by selfmade ✓ first-party

Explore the Doomsday Archiver, a vulnerable web app that clones and archives Git repos. Exploit a critical Git flaw (CVE-2025-48384) to achieve remote code execution through malicious submodules and uncover hidden flags.

challenge lab builds on install

Web Exploitation OSINT & Recon

DOOM's DAY Open Source Archive — Web UI

  • Minimal web interface that clones a provided GitHub repo URL using a vulnerable Git version to demonstrate CVE-2025-48384 behavior.
  • Shows the Git version in use. Input is validated and restricted to https://github.com/... URLs to avoid unsafe protocols.

Build & Run

  • Build: docker build -t doom-archive-web GitGitGit/WebApp
  • Run: docker run --rm -p 8080:8080 -t doom-archive-web
  • Open: http://localhost:8080

Notes

  • A flag is created at $HOME/flag.txt on container start (CTF-style).
  • Clones are stored under /data/archives/ with unique IDs.
  • Only GitHub HTTPS URLs are accepted (e.g., https://github.com/<owner>/<repo> or with .git).
  • Uses Git ${GIT_VERSION} built from source (default 2.40.4). Adjust at build: --build-arg GIT_VERSION=2.43.7.
  • The backend forces submodule URL override for the PoC: submodule.sub.url=https://github.com/s41r4j/CVE-2025-48384-submodule.git and re-checkouts HEAD to re-trigger hooks.