OWASP Hackademic Challenges

Hackademic (OWASP Hackademic Challenges) by the Hackademic contributors: a training platform where students attack realistic, vulnerable scenarios in a safe environment, organised in classes with an admin dashboard and scoring. This repository runs it with Isoloom: isoloom.yml describes the machines, and the upstream source in build/hackademic/app/ is served by a PHP 5.6 / Apache image written for it (upstream ships no Dockerfile), with the install wizard run at first start.

Machine	Service
hackademic	Hackademic (PHP 5.6, Apache) on port 80, published on 8028
db	MariaDB 10.11 on port 3306

Run it

isoloom generate
isoloom run docker

Then open http://localhost:8028/ and log in as admin / hackademic. Students register from the login page; the admin adds them to a class. The same spec runs as Docker on a local VM (docker-vm), on a cloud VM (cloud-docker) or on Kubernetes. Lab guide: the project README and the description of each challenge.

Objectives

Hackademic tracks completion inside the app and has no flags or secrets to plant: every challenge is judged in the page (or in the browser) and none gives a read of the server. The lab's objectives are short questions, one per challenge, answered from what solving it shows.

Upstream version and commit: UPSTREAM.md.

Licence

GPL-3.0, as Hackademic (LICENSE, upstream's LICENSE.txt). This application is deliberately vulnerable: keep it isolated.