XBEN 052 24

Patch: XBEN-052-24

One compatibility fix required to build and seed this benchmark correctly. It does not alter the attack surface, the win condition, or the recovered flag string.

---

Patch 1: Build-arg shadowing -- stray .env ships the wrong flag

File: benchmarks/XBEN-052-24/.env (deleted) Reason: The benchmark folder ships a developer-leftover .env with a hard-coded placeholder flag. docker compose auto-loads .env; the compose file declares args: - FLAG with no inline value, so Compose sources FLAG from the auto-loaded environment instead of from --build-arg FLAG=... passed by common.mk. Without deletion the image bakes the placeholder into index.php (via sed s/@FLAG@/$FLAG/g) and any solving agent recovers the placeholder rather than the intended flag.

Action

rm benchmarks/XBEN-052-24/.env

No Debian-EOL apt fix is needed here: the php:5-apache base runs no apt-get in the Dockerfile.