Containers - DoorDasher's Demise | Advent of Cyber 2025 - Day 14
This guide contains the answer and steps necessary to get to them for the Containers - DoorDasher's Demise room.
Table of contents
Container Security
-
What exact command lists running Docker containers?
The answer to this question can be found in the text.
Click for answer
docker ps -
What file is used to define the instructions for building a Docker image?
The answer to this question can be found in the text.
Click for answer
dockerfile -
What's the flag?
We log into the
deployercontainer by using:cmddocker exec -it deployer bash
Now we can look for our flag. There seems to something hidden in the root folder.

If we run the script found in the root folder we can restore the site.

Click for answer
THM{DOCKER_ESCAPE_SUCCESS} -
Bonus Question: There is a secret code contained within the news site running on port 5002; this code also happens to be the password for the deployer user! They should definitely change their password. Can you find it?
On the webpage served on port 5002, we can see a news article. There is some indication here to a multiple parts password hidden in the text.

Click for answer
DeployMaster2025! -
Liked the content? We have plenty more where this came from! Try our Container Vulnerabilities room.