feat(red): challenge Red Team 3 VAULT-9 (reverse XOR + ret2win, flags…

[Jacob-dot-bit]

… hors dépôt via challenge.env)

[Copilot]

Pull request overview

This PR adds a new intermediate “Red Team 3” binary challenge (VAULT-9) to the RootMeUp challenges suite, including Dockerized deployment, player/admin documentation, a report template, and a reference exploit/solution flow.

Changes:

• Introduces the VAULT-9 vulnerable binary source (vault.c) plus container runtime (Dockerfile, entrypoint, compose).
• Adds secret/flag generation at build time via setup/gen_secret.py with an example challenge.env file.
• Adds player/admin docs, a report template, and spoiler solution + automated exploit script.

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
challenges/3-Red-Team-Binary-Vault/solution/SOLUTION.md	Spoiler write-up for reverse (XOR) + ret2win approach and expected output.
challenges/3-Red-Team-Binary-Vault/solution/exploit.py	Pwntools exploit automating license bypass + ret2win to vault().
challenges/3-Red-Team-Binary-Vault/setup/gen_secret.py	Generates secret.h + flag*.txt from env / challenge.env / placeholders.
challenges/3-Red-Team-Binary-Vault/setup/challenge.env.example	Template for providing LICENSE/FLAG1/FLAG2/XOR_KEY outside git.
challenges/3-Red-Team-Binary-Vault/report/report_template.md	Player/team report template for write-up consistency.
challenges/3-Red-Team-Binary-Vault/README.md	High-level challenge overview, structure, and quick build instructions.
challenges/3-Red-Team-Binary-Vault/docs/USER_GUIDE.md	Player-facing guide (no spoilers) and suggested tooling.
challenges/3-Red-Team-Binary-Vault/docs/ADMIN_DEPLOYMENT.md	Admin deployment guide (CTFd container plugin), build/test/extraction notes.
challenges/3-Red-Team-Binary-Vault/Dockerfile	Debian-based build producing the vulnerable binary + flag files and running via socat.
challenges/3-Red-Team-Binary-Vault/docker-entrypoint.sh	Starts socat listener to spawn one vault per TCP connection.
challenges/3-Red-Team-Binary-Vault/docker-compose.yml	Local test deployment configuration with optional build-arg overrides.
challenges/3-Red-Team-Binary-Vault/challenge/vault.c	Challenge binary implementing XOR license check and intentional overflow for ret2win.
challenges/3-Red-Team-Binary-Vault/.gitignore	Ignores generated artifacts and local secret config.
challenges/3-Red-Team-Binary-Vault/.dockerignore	Excludes non-build artifacts (docs/solution/report) from Docker build context.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.