vulhub/vulhub resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

21167 stars · 4804 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Vulhub is an open-source collection of pre-built vulnerable Docker environments, each launched with a single docker compose command and documented with reproduction steps. It is designed for security researchers, educators, and students to safely learn, practice, and demonstrate real-world vulnerabilities.

Use cases

• reproduce a CVE locally for security research
• set up a vulnerable lab environment for penetration testing practice
• teach students how real-world vulnerabilities are exploited
• demonstrate a vulnerability to a team without manual setup
• test a vulnerability scanner against known vulnerable services
• practice exploit development in an isolated container

When to choose

• you need a quick, one-command vulnerable environment for a specific CVE
• you want documented reproduction steps for learning or teaching security
• you need isolated, disposable lab environments via Docker Compose

When to avoid

• you need a production-hardened security tool rather than a learning dataset
• you cannot run Docker or need ARM support for all environments
• you want a vulnerability scanner or defensive tooling - Vulhub only provides vulnerable targets

Facets

dataset · maturity active

security penetration-testing developer-tools self-hosted security penetration-testing developer-tools education windows self-hosted vulnerable-environments docker-compose cve-reproduction security-training vulnerability-lab docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="vulhub/vulhub")