An open API service indexing awesome lists of open source software.

https://github.com/vulhub/vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose
https://github.com/vulhub/vulhub

docker docker-compose dockerfile vulhub vulnerability-environment

Last synced: 11 days ago
JSON representation

Pre-Built Vulnerable Environments Based on Docker-Compose

Awesome Lists containing this project

README

        


Vulhub


Chat on Discord
GitHub Sponsors
Vulnerabilities count
GitHub language count
GitHub contributors
GitHub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required.

[δΈ­ζ–‡η‰ˆζœ¬(Chinese version)](README.zh-cn.md)

## Quick Start

**Install Docker** (example for Ubuntu 24.04):

```bash
# Install the latest version docker
curl -s https://get.docker.com/ | sh

# Run docker service
systemctl start docker
```

For other operating systems, see the [Docker documentation](https://docs.docker.com/).

Although all Vulhub environments are running based on Docker Compose, you no longer need to install docker-compose separately. Instead, you can use the built-in `docker compose` command to start Vulhub environments.

**Download and set up Vulhub:**

```bash
git clone --depth 1 https://github.com/vulhub/vulhub
```

**Launch a vulnerable environment:**

```bash
cd vulhub/langflow/CVE-2025-3248 # Example: enter a vulnerability directory
docker compose up -d
```

Each environment directory contains a detailed **README** with reproduction steps and usage instructions.

**Clean up after testing:**

```bash
docker compose down -v
```

> [!NOTE]
>
> - Use a VPS or VM with at least 1GB RAM for best results
> - The `your-ip` in documentation refers to your host/VPS IP, not the Docker container IP
> - Ensure Docker has permission to access all files in the current directory to avoid permission errors
> - Vulhub currently supports only x86 architectures (not ARM)
> - **All environments are for testing and educational purposes only. Do not use in production!**

## Contributing

If you encounter errors during build or runtime, please first check if they are caused by Docker or related dependencies. If you confirm an issue with a Dockerfile or Vulhub code, submit an issue. See [FAQ](https://vulhub.org/documentation/faq) for troubleshooting tips.

For questions, contact us:

- [Discord](https://discord.gg/bQCpZEK)
- [Twitter](https://twitter.com/vulhub)

Thanks to all [contributors](contributors.md):

[![](https://opencollective.com/vulhub/contributors.svg?width=890&button=false)](https://github.com/vulhub/vulhub/graphs/contributors)

## Partners

Our partners and users:







Sponsor Vulhub on [GitHub Sponsor](https://github.com/sponsors/phith0n), [OpenCollective](https://opencollective.com/vulhub#backer), or [Patreon](https://www.patreon.com/bePatron?u=12677520) πŸ™




More ways to [donate](https://vulhub.org/).

## License

Vulhub is licensed under the MIT License. See [LICENSE](LICENSE) for details.