# Lyrie lab target — CVE-2024-7399 (Samsung MagicINFO path traversal)
# License-gated: real MagicINFO Server requires Samsung license.
# This mock faithfully replicates the vulnerable servlet as documented in:
#   - SANS ISC Diary 31920
#   - Metasploit PR #20188
#   - RedPacket Security / Broadcom advisories
FROM python:3.12-alpine
WORKDIR /app
RUN mkdir -p webroot
COPY mock-magicinfo.py .
EXPOSE 8080
HEALTHCHECK --interval=2s --timeout=2s --retries=10 \
  CMD wget -qO- http://127.0.0.1:8080/health || exit 1
CMD ["python3", "mock-magicinfo.py"]
