The Walkthrough can be found
here
.
The flag can be found by compromising the web application and viewing resources that belong to other users.
Download the VM
Here
Have what it takes to do it without a walkthrough? Good luck!