This exercise explains how you can exploit a vulnerability published in 2014 in Gitlist.
The ISO for this exercise can be downloaded by clicking here (23MB).
See this excellent Blog Post for more details: https://dronesec.net/blog/gitlist-commit-to-rce/