The Walkthrough can be found here.

The flag can be found by compromising the web application and viewing resources that belong to other users.

Download the VM Here