Laboratory

CTF

• https://tryhackme.com
• https://hackthebox.eu
• https://academy.hackthebox.com
• https://picoctf.org/
• https://www.vulnhub.com
• https://portswigger.net/web-security/
• https://pentesterlab.com
• https://portal.offensive-security.com/proving-grounds/play

Metasploitable1

• https://www.vulnhub.com/entry/metasploitable-1,28/
• https://download.vulnhub.com/metasploitable/Metasploitable.zip

  wget https://download.vulnhub.com/metasploitable/Metasploitable.zip
  # user: msfadmin
  # pass: msfadmin
  

Metasploitable2

• https://docs.rapid7.com/metasploit/metasploitable-2/
• http://downloads.metasploit.com/data/metasploitable/metasploitable-linux-2.0.0.zip

  wget http://downloads.metasploit.com/data/metasploitable/metasploitable-linux-2.0.0.zip
  # user: msfadmin
  # pass: msfadmin
  

Metasploitable3

• https://github.com/rapid7/metasploitable3
• https://github.com/rapid7/metasploitable3/wiki/Vulnerabilities

  echo "https://github.com/rapid7/metasploitable3"
  
  sudo apt install vagrant 
  
  vagrant plugin install winrm
  vagrant plugin install winrm-fs
  vagrant plugin install winrm-elevated
  
  mkdir metasploitable3-workspace
  cd metasploitable3-workspace
  curl -O https://raw.githubusercontent.com/rapid7/metasploitable3/master/Vagrantfile
  
  vagrant up
  # user: vagrant
  # pass: vagrant
  

Mutillidae

• https://hub.docker.com/r/szalek/mutillidae/
  • run: docker run -p 8081:80 -t szalek/mutillidae
  • goto: http://localhost:8081/mutillidae

WEBgoat-7.1

• https://hub.docker.com/r/webgoat/webgoat-7.1/
  • run: docker run -p 8082:8080 -t webgoat/webgoat-7.1
  • goto: http://localhost:8082/WebGoat

WEBgoat-8.0

• https://hub.docker.com/r/webgoat/webgoat-8.0/
  • run: docker run -p 8084:8080 -t webgoat/webgoat-8.0
  • goto: http://localhost:8084/WebGoat

HandsOnHacking

wget https://www.hackerhousebook.com/hh-booklab-v1-i386.hybrid.iso

DVWA

• https://github.com/digininja/DVWA

Insecure bank

• https://github.com/hdiv/insecure-bank
• http://localhost:8080/insecure-bank/
  • Username: john Password: test

sudo apt install git
sudo apt install maven

git clone https://github.com/hdiv/insecure-bank.git

mvn clean package
mvn cargo:run