Updates docs

Author: msutovsky-r7

documentation/modules/auxiliary/scanner/http/pretalx_file_read_cve_2023_28459.md

@@ -5,6 +5,66 @@ Pretalx is a web-based conference planning tool, used to manage call for paper s
 Installation steps:
 
 1. `git clone https://github.com/pretalx/pretalx-docker.git`
+1. Change content of `Dockerfile`:
+```
+FROM python:3.10-bookworm
+
+RUN apt-get update && \
+    apt-get install -y git gettext libmariadb-dev libpq-dev locales libmemcached-dev build-essential \
+            supervisor \
+            sudo \
+            locales \
+            --no-install-recommends && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    dpkg-reconfigure locales && \
+    locale-gen C.UTF-8 && \
+    /usr/sbin/update-locale LANG=C.UTF-8 && \
+    mkdir /etc/pretalx && \
+    mkdir /data && \
+    mkdir /public && \
+    groupadd -g 999 pretalxuser && \
+    useradd -r -u 999 -g pretalxuser -d /pretalx -ms /bin/bash pretalxuser && \
+    echo 'pretalxuser ALL=(ALL) NOPASSWD:SETENV: /usr/bin/supervisord' >> /etc/sudoers
+
+ENV LC_ALL=C.UTF-8
+
+
+COPY pretalx/pyproject.toml /pretalx
+COPY pretalx/src /pretalx/src
+COPY deployment/docker/pretalx.bash /usr/local/bin/pretalx
+COPY deployment/docker/supervisord.conf /etc/supervisord.conf
+
+RUN pip3 install -U pip setuptools wheel typing && \
+    pip3 install -e /pretalx/[mysql,postgres,redis] && \
+    pip3 install pylibmc && \
+    pip3 install gunicorn && \
+    chmod -R 777 /public
+
+
+RUN python3 -m pretalx makemigrations
+RUN python3 -m pretalx migrate
+
+RUN apt-get update && \
+    apt-get install -y curl && \
+    curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && \
+    apt install nodejs npm && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    python3 -m pretalx rebuild
+
+RUN chmod +x /usr/local/bin/pretalx && \
+    cd /pretalx/src && \
+    rm -f pretalx.cfg && \
+    chown -R pretalxuser:pretalxuser /pretalx /data /public && \
+    rm -f /pretalx/src/data/.secret
+
+USER pretalxuser
+VOLUME ["/etc/pretalx", "/data", "/public"]
+EXPOSE 80
+ENTRYPOINT ["pretalx"]
+CMD ["all"]
+```
 1. Change content of `docker-compose.yml` to following:
 ```
 services:

documentation/modules/exploit/linux/http/pretalx_rce_cve_2023_28458.md

@@ -5,6 +5,66 @@ Pretalx is a web-based conference planning tool, used to manage call for paper s
 Installation steps:
 
 1. `git clone https://github.com/pretalx/pretalx-docker.git`
+1. Change content of `Dockerfile`:
+```
+FROM python:3.10-bookworm
+
+RUN apt-get update && \
+    apt-get install -y git gettext libmariadb-dev libpq-dev locales libmemcached-dev build-essential \
+            supervisor \
+            sudo \
+            locales \
+            --no-install-recommends && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    dpkg-reconfigure locales && \
+    locale-gen C.UTF-8 && \
+    /usr/sbin/update-locale LANG=C.UTF-8 && \
+    mkdir /etc/pretalx && \
+    mkdir /data && \
+    mkdir /public && \
+    groupadd -g 999 pretalxuser && \
+    useradd -r -u 999 -g pretalxuser -d /pretalx -ms /bin/bash pretalxuser && \
+    echo 'pretalxuser ALL=(ALL) NOPASSWD:SETENV: /usr/bin/supervisord' >> /etc/sudoers
+
+ENV LC_ALL=C.UTF-8
+
+
+COPY pretalx/pyproject.toml /pretalx
+COPY pretalx/src /pretalx/src
+COPY deployment/docker/pretalx.bash /usr/local/bin/pretalx
+COPY deployment/docker/supervisord.conf /etc/supervisord.conf
+
+RUN pip3 install -U pip setuptools wheel typing && \
+    pip3 install -e /pretalx/[mysql,postgres,redis] && \
+    pip3 install pylibmc && \
+    pip3 install gunicorn && \
+    chmod -R 777 /public
+
+
+RUN python3 -m pretalx makemigrations
+RUN python3 -m pretalx migrate
+
+RUN apt-get update && \
+    apt-get install -y curl && \
+    curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && \
+    apt install nodejs npm && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    python3 -m pretalx rebuild
+
+RUN chmod +x /usr/local/bin/pretalx && \
+    cd /pretalx/src && \
+    rm -f pretalx.cfg && \
+    chown -R pretalxuser:pretalxuser /pretalx /data /public && \
+    rm -f /pretalx/src/data/.secret
+
+USER pretalxuser
+VOLUME ["/etc/pretalx", "/data", "/public"]
+EXPOSE 80
+ENTRYPOINT ["pretalx"]
+CMD ["all"]
+```
 1. Change content of `docker-compose.yml` to following:
 ```
 services: