I have been assigned CTF project for IT Security for my final year project in school.
We are planning to have a flag that are base on SQL injection but for the user to overcome the challenge, they would have to compromise the database by dumping the entire database. Now the problem is that, with this vulnerability, there is also a way for the user to access the other database that are also residing on the same server(The database which our CTF application require to use).
My current solution is run a VMWARE machine to host the database and sql injection flag there. I'm planning to use ubuntu, is it a good choice for such purpose? I'm not sure if there is any better solution for it, if you have one please help..