I'm a teaching assistant in software security and running a server that is vulnerable by design.
It's an nginx server, and it has 40 ports open. Each port serves a web application, and all the web applications are very vulnerable to hacking. If one web application is compromised, the attacker will gain the privileges of the www-data user, and the attacker will then be able to compromise the other 39 web applications. Is there any way I can keep this from happening? I don't want the attacker to gain access rights beyond the single hacked web application.
Hardware limitations on the server makes Docker unfeasible, let alone VMs.