Publishing release
This release will hold the vulnerable software as vmdk image. For me it worked to create a new appliance in virtualbox (Other Linux x64) and then use this vmdk as existing disk.
You will have to make sure to use a host-only network so you can reach the appliance.
Logins
root:secudos (console)
admin:admin (domos web console at https://ip:10000)