{"id":19522358,"url":"https://github.com/hxsecurity/vulhub-compose","last_synced_at":"2025-07-28T07:04:37.022Z","repository":{"id":53005840,"uuid":"348250087","full_name":"HXSecurity/vulhub-compose","owner":"HXSecurity","description":"vulhub-compose是一款屏蔽docker-compose的命令行工具，目的是降低火线平台社区用户使用vulhub靶场的难度，减少学习docker-compose的时间成本；同时，支持直接安装洞态IAST（原灵芝IAST）到vulhub靶场，用于漏洞复现、漏洞挖掘。","archived":false,"fork":false,"pushed_at":"2021-04-10T02:43:45.000Z","size":32,"stargazers_count":46,"open_issues_count":0,"forks_count":6,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-07-12T03:48:50.962Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/HXSecurity.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-03-16T07:19:01.000Z","updated_at":"2025-04-19T17:46:01.000Z","dependencies_parsed_at":"2022-09-08T06:41:39.878Z","dependency_job_id":null,"html_url":"https://github.com/HXSecurity/vulhub-compose","commit_stats":null,"previous_names":["huoxianclub/vulhub-compose"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/HXSecurity/vulhub-compose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HXSecurity%2Fvulhub-compose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HXSecurity%2Fvulhub-compose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HXSecurity%2Fvulhub-compose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HXSecurity%2Fvulhub-compose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/HXSecurity","download_url":"https://codeload.github.com/HXSecurity/vulhub-compose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HXSecurity%2Fvulhub-compose/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":267475779,"owners_count":24093356,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-28T02:00:09.689Z","response_time":68,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-11T00:38:37.361Z","updated_at":"2025-07-28T07:04:36.948Z","avatar_url":"https://github.com/HXSecurity.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# vulhub-compose\n[![license](https://img.shields.io/github/license/huoxianclub/vulhub-compose.svg)](https://github.com/huoxianclub/vulhub-compose/blob/main/LICENSE)\n[![build](https://github.com/huoxianclub/vulhub-compose/actions/workflows/python-publish.yml/badge.svg)](https://github.com/huoxianclub/vulhub-compose/actions/workflows/python-publish.yml)\n\n`vulhub-cli` is a command line tool of the vulhub project, which makes the operation of `docker-compose` transparent and reduces the difficulty of using the vulhub shooting range. Vulhub-cli supports local mode and remote mode. The remote mode can directly start the related shooting range without downloading the complete vulhub project, which is more convenient to use.\n\n[中文文档](https://github.com/huoxianclub/vulhub-compose/blob/main/README.zh-ch.md)\n\n## Quick start\nIf you want to download the vulhub project or have already downloaded the vulhub project, you can directly use the local mode; if you don’t want to download, you can use the remote mode\n\n#### download vulhub-cli\n```shell script\n$ pip install vulhub-cli\n```\n\n#### local mode\n```shell script\n# Specify relative path\n$ vulhub-cli local start --app fastjson/1.2.24-rce\n$ vulhub-cli local start --app ./fastjson/1.2.24-rce\n\n# Specify absolute path\n$ vulhub-cli local start --app /opt/vulhub/fastjson/1.2.24-rce\n\n# Stop environment use vulhub-cli\n$ vulhub-cli local stop --app fastjson/1.2.24-rce\n\n# Stop environment with agent use vulhub-cli\n$ vulhub-cli local stop --app fastjson/1.2.24-rce\n```\n\n#### remote mode\n```shell script\n# Specify vulhub app's name, eg: fastjson/1.2.24-rce\n$ vulhub-cli remote start --app fastjson/1.2.24-rce\n\n# Stop environment with agent use vulhub-cli\n$ vulhub-cli remote stop --app fastjson/1.2.24-rce\n```\n\n\n## Plugin System\n`vulhub-cli` provides plug-in functions, which can support custom plug-ins to achieve specific functions.\n\n### Plugin: dongtai\nLingzhi IAST is an interactive application security testing tool independently developed by [FireWire platform](https://www.huoxian.cn/) to detect vulnerabilities in application systems; dongtai IAST supports the detection of some 0 Day vulnerabilities. Now, you can use the vulhub-cli tool to quickly create a shooting range and install dongtai IAST to experience the vulnerability detection function.\n\n#### Usage\nThe startup method is the same as the normal startup method, just add the `plugin` parameter to specify the use of the `dongtai` plugin.\n```shell script\n# Start the vulhub's app with public Lingzhi IAST agent\n$ vulhub-cli remote start --app fastjson/1.2.24-rce --plugin dongtai\n\n# Start the vulhub's app with your own Lingzhi IAST agent\n$ vulhub-cli remote start --app fastjson/1.2.24-rce --plugin dongtai --plugin-args \"token=\u003cdongtai iast token\u003e\"\n\n# Stop the vulhub's app with Lingzhi IAST\n$ vulhub-cli remote stop --app fastjson/1.2.24-rce --plugin dongtai\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhxsecurity%2Fvulhub-compose","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhxsecurity%2Fvulhub-compose","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhxsecurity%2Fvulhub-compose/lists"}