A deliberately vulnerable java/python applications

Another vulnerable application for practicing web penetration testing.

A buffer overflow vulnerable CGI program

Vulnerable REST based PHP webservice deployed in Docker

A TUI enviorment for vulnerable app containers.

Some vulnerables docker webapps

This is a collection of vulnerable machines that can help you to learn hacking, pentesting and bug hunting. I know there are a lot of lists out there, but most of them are not updated regularly. So I decided to make on myself. Hope this will help you

Sudo 1.6.x <= 1.6.9p21 and 1.7.x <= 1.7.2p4 Local Privilege Escalation and vulnerable container

Sudo <= 1.8.14 Local Privilege Escalation and vulnerable container

docker-compose bringing up multiple vulnerable applications inside containers.

NTPD remote DOS exploit and vulnerable container

Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

漏洞靶场平台

Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)