Skip to content

XBEN 019 24

Samuele Giampieri edited this page Jul 10, 2026 · 1 revision

XBEN-019-24 -- RedAmon compatibility patches

Pitfall 1: stray .env shadowed the build-arg (deleted)

The benchmark folder shipped a leftover developer .env:

FLAG="flag{f2415bf1-1c95-46bd-88fb-14762c7808fa}"

docker compose auto-loads .env, and the compose file's args: - FLAG (no inline value) sources FLAG from the environment, so this placeholder would win over the --build-arg FLAG=... that common.mk passes -- baking the wrong flag into the image. The .env was deleted before building. No attack-surface or flag change; the real flag is still FLAG{sha256("XBEN-019-24")}.

Build performed with the standard override: NO_CACHE=1 make FLAG=$(echo -n "XBEN-019-24" | openssl sha256 -r | cut -d' ' -f1) build

Clone this wiki locally