{"id":13798995,"url":"https://github.com/davevs/dvxte","last_synced_at":"2025-05-13T06:31:54.570Z","repository":{"id":18037886,"uuid":"83211693","full_name":"davevs/dvxte","owner":"davevs","description":"Damn Vulnerable eXtensive Training Environment","archived":false,"fork":false,"pushed_at":"2022-03-15T09:36:19.000Z","size":775,"stargazers_count":102,"open_issues_count":21,"forks_count":38,"subscribers_count":8,"default_branch":"master","last_synced_at":"2024-11-18T13:47:19.169Z","etag":null,"topics":["docker","training","vulnerable"],"latest_commit_sha":null,"homepage":"","language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/davevs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-02-26T13:46:39.000Z","updated_at":"2024-09-04T20:17:17.000Z","dependencies_parsed_at":"2022-08-07T09:00:28.423Z","dependency_job_id":null,"html_url":"https://github.com/davevs/dvxte","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davevs%2Fdvxte","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davevs%2Fdvxte/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davevs%2Fdvxte/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davevs%2Fdvxte/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/davevs","download_url":"https://codeload.github.com/davevs/dvxte/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253889016,"owners_count":21979550,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","training","vulnerable"],"created_at":"2024-08-04T00:00:57.623Z","updated_at":"2025-05-13T06:31:53.671Z","avatar_url":"https://github.com/davevs.png","language":"Dockerfile","funding_links":[],"categories":["HTML","HTML (177)","Learning Platforms","Dockerfile","Learning Platforms to Sharpen Your Skills"],"sub_categories":["Privilege Escalation","Off-Line"],"readme":"# Current status: works again!\r\n\r\n## Background\r\nWhen I started at Xebia in 2015, Docker was hip and new and I wanted to understand it better. As I was getting tired of continuously rebuilding vulnerable testing environments I thought it was a nice idea to see if I could put them all in 1 docker container, so that a simple restart would refresh everything. I also wanted to see if I could break docker by putting so many things in 1 container. Turns out docker is really flexible and has no problem with running multiple webservers and databases at the same time. In 2017 I lost interest in the project as I was no longer using it and I didn't feel like maintaining all the dependencies anymore.\r\nIn 2022 @commjoen challenged me to revamp the project, so here we are :)\r\n\r\n## Disclaimer\r\nThis is a very bad idea and probably one of the best examples of how not to use docker.\u003cbr\u003e\u003cbr\u003e\r\n![](assets/itruns.jpg)\r\n\r\n\r\n## Damn Vulnerable eXtensive Training Environment\r\nDVXTE is a docker container with several vulnerable applications.\r\nBy using a docker container it's easy to setup and can easily be reset to it's starting point.\r\n\r\nCurrently the container contains the following tools and applications:\r\n\r\n**Vulnerable applications:**\r\n  * Juiceshop     https://github.com/bkimminich/juice-shop\r\n  * Railsgoat     https://github.com/OWASP/railsgoat\r\n  * django.NV     https://github.com/nVisium/django.nV\r\n  * Buggy Bank    https://www.mavensecurity.com/about/webmaven/\r\n\r\n**Exercise Environments**\r\n  * WebGoat       https://github.com/WebGoat/WebGoat\r\n  * DVWA          https://github.com/digininja/DVWA\r\n  * Mutilidae II  https://github.com/webpwnized/mutillidae\r\n\r\n**Challenge labs**\r\n  * WrongSecrets  https://github.com/commjoen/wrongsecrets\r\n  * CryptOMG      https://github.com/SpiderLabs/CryptOMG\r\n  * FileUploadLab https://github.com/LunaM00n/File-Upload-Lab\r\n  * DVGQL\t\t  https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application\r\n\r\n**Tools**\r\n  * Mailcatcher   https://mailcatcher.me/\r\n  * Supervisor    http://supervisord.org/\r\n\r\nOnce build, the image currently has a size of roughly 2.6 GB\u003c/br\u003e\r\n\r\n## Dockerhub\r\nReleases will be pushed to dockerhub; you can pull a compressesed and pre-build version at: https://hub.docker.com/r/dvsteinqx/dvxte \r\n\r\n### pulling the image\r\nWhen you pull the image, make sure you add the version number, like e.g.: \u003cbr\u003e\r\n`docker pull dvsteinqx/dvxte:0.2`\r\n\r\n### running the image\r\nafter pulling the image you can run it with the following command:\u003cbr\u003e\r\n`docker run --name dvxte -p 80:80 -p 1080:1080 -p 3000:3000 -p 4000:4000 -p 5013:5013 -p 8000:8000 -p 8200:8200 -p 8300:8300 -p 8400:8400 -p 9000:9000 dvsteinqx/dvxte`\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavevs%2Fdvxte","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdavevs%2Fdvxte","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavevs%2Fdvxte/lists"}