{"id":15985466,"url":"https://github.com/brittonhayes/security-sandbox","last_synced_at":"2026-05-06T20:32:56.209Z","repository":{"id":122975131,"uuid":"347227718","full_name":"brittonhayes/security-sandbox","owner":"brittonhayes","description":"My personal security sandbox environment. For use in CTF events, studying, or security research 🧅☠️🏖️","archived":false,"fork":false,"pushed_at":"2021-03-19T09:13:39.000Z","size":249,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-02-10T06:11:57.060Z","etag":null,"topics":["docker","juiceshop","kali","metasploit","owasp","vagrant"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/brittonhayes.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-03-12T23:49:04.000Z","updated_at":"2024-12-29T01:34:25.000Z","dependencies_parsed_at":null,"dependency_job_id":"d31c57f5-7719-4c66-a414-64d2e21cf133","html_url":"https://github.com/brittonhayes/security-sandbox","commit_stats":{"total_commits":22,"total_committers":1,"mean_commits":22.0,"dds":0.0,"last_synced_commit":"4dbc6e5fb7c39e5757217605b2906fb89fb05d3a"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brittonhayes%2Fsecurity-sandbox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brittonhayes%2Fsecurity-sandbox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brittonhayes%2Fsecurity-sandbox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brittonhayes%2Fsecurity-sandbox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/brittonhayes","download_url":"https://codeload.github.com/brittonhayes/security-sandbox/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247250382,"owners_count":20908357,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","juiceshop","kali","metasploit","owasp","vagrant"],"created_at":"2024-10-08T02:21:59.854Z","updated_at":"2026-05-06T20:32:51.182Z","avatar_url":"https://github.com/brittonhayes.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Security Sandbox 🏖️\n\n\u003e My personal sandbox environment for testing out new\n\u003e security tools, vulnerable applications, and using in CTFs.\n\u003e Feel free to use this for your own studying or enjoyment!\n\n![Security Sandbox Logo](./images/security-sandbox.png)\n\n## Requirements\n\nThere are only two requirements to\nget up and running:\n\n- [Virtual Box](https://www.virtualbox.org/) or [VMWare Workstation](https://www.vmware.com/products/workstation-player/workstation-player-evaluation.html)\n- [Hashicorp Vagrant](https://www.vagrantup.com/downloads)\n\nOnce you've got a virtualization solution setup as well as Hashicorp Vagrant, you're ready to go.\n\n## Usage ⚡\n\nSet up the Vagrant box and bootstrap it with\nmy preferred directory structure and workspace environment.\n\n```shell\n# Clone the repository with the Github CLI\ngh repo clone brittonhayes/security-sandbox\n\n# Start up the primary Kali machine\nvagrant up\n\n# The login is\nusername: vagrant\npassword: vagrant\n```\n\n### Help\n\nTo view the available helper commands use `make help`.\n\n```shell\n❯ make help\nUsage:\nkali            Build the Kali box\nsandbox         Build the whole sandbox\nteardown        Tear down the sandbox\ndestroy         Destroy the sandbox\n```\n\n## Red Team Lab Environment (Optional) 🟥\n\nThis virtual environment comes with a few testing labs available. \nPick your flavor!\n\n### Kali\n\nThe kali box comes with tor and proxychains setup on boot, so feel free to chain requests through there first.\n\n```shell\n# Check tor service\nsystemctl status tor\n\n# Run a port scan against scanme.nmap.org\n# through a tor proxy \nproxychains nmap -sT -Pn scanme.nmap.org \n```\n\n### Juiceshop\n\n```shell\n# Start up juiceshop\nvagrant up juiceshop\n\n# Navigate to http://192.168.33.20\n```\n\n### Damn Vulnerable Web Application\n\n```shell\n# Start up DVWA\nvagrant up dvwa\n\n# Navigate to http://192.168.33.30\n```\n\n### Metasploitable\n\n```shell\n# Start up Metasploitable\nvagrant up metasploitable\n\n# Navigate to http://192.168.33.40\n```\n\n## Blue Team Environment (Optional) 🟦\n\nIf you're looking for a good blue team environment to pair with this sandbox, I recommend a [Detection Lab](https://detectionlab.network/) deployment. \n\nSetup instructions can be found here:\n[Detection Lab Deployment Instructions](https://detectionlab.network/deployment/)\n\n\n## Collaborate Online\n\nIf you'd like to collaborate with others on any of the vulnerable web applications, you can use [vagrant share](https://www.vagrantup.com/docs/share)\nright in the command line. This will create a URL that you can give to anyone and will route directly into your chosen Vagrant environment.\n\nThis utilizes a service called [ngrok](https://ngrok.com). For more information, visit ngrok's documentation.\n\n```shell\n# Install the plugin\nvagrant plugin install vagrant-share\n\n# Share your environment\nvagrant share\n```\n\n---\n\n## References\n\n[OWASP Juiceshop](https://owasp.org/www-project-juice-shop/)\n\n[OWASP Juiceshop CTF](https://github.com/bkimminich/juice-shop-ctf)\n\n[DVWA](https://dvwa.co.uk/)\n\n[Metasploitable](https://github.com/rapid7/metasploitable3)\n\n[Metasploitable vulnerabilities](https://github.com/rapid7/metasploitable3/wiki/Vulnerabilities)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbrittonhayes%2Fsecurity-sandbox","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbrittonhayes%2Fsecurity-sandbox","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbrittonhayes%2Fsecurity-sandbox/lists"}