(web): Added challenge underground watch part 1

web/underground_watch_part_1/challenge.yml

@@ -0,0 +1,28 @@
+name: "Underground Watch - Part 1" 
+author: "sAINT_barber"
+category: web
+
+description: |
+  The Andromeda Initiative's surveillance application has been hacked by OrionTech. They managed to gain access to our server and left a note in the root (`/`) directory. 
+  We need you to find the vulnerability and report back how they hacked us.
+
+
+value: 500
+type: dynamic_docker
+extra:
+  initial: 500
+  minimum: 100
+  decay: 50
+  redirect_type: http
+  compose_stack: !filecontents docker-compose.yml
+
+
+flags:
+  - CCSC{f1l3_upl04d_47t4ck5_mu5t_b3_570pp3d}
+
+tags:
+  - web
+  - easy
+
+state: visible
+version: "0.1"

web/underground_watch_part_1/docker-compose.yml

@@ -0,0 +1,7 @@
+services:
+
+  app:
+    image: ghcr.io/cybermouflons/ccsc2024/underground_watch_part_1:latest # Add in prod
+    build: ./setup/
+    ports:
+      - 3001:80

web/underground_watch_part_1/setup/.dockerignore

@@ -0,0 +1 @@
+Dockerfile

web/underground_watch_part_1/setup/Dockerfile

@@ -0,0 +1,17 @@
+FROM php:7.4-apache
+
+WORKDIR /var/www/html
+
+COPY css css
+COPY fonts fonts
+COPY images images
+COPY js js
+COPY uploads uploads
+COPY index.php index.php
+COPY upload.php upload.php
+
+RUN chown -R www-data:www-data /var/www/html
+
+COPY flag.txt /flag.txt
+
+