Vulhub

Vulhub is a collection of pre-built vulnerable environments based on Docker Compose that allows security researchers and students to reproduce and study real-world CVEs and common vulnerability classes without complex setup. Each environment includes a Docker Compose file, exploit documentation, and step-by-step instructions for reproducing the vulnerability, covering hundreds of CVEs across web frameworks, databases, middleware, and operating system components. Penetration testers, security trainers, and CTF organizers use Vulhub to quickly spin up realistic vulnerable targets for practice, training, and tool development without risking production systems. The project's Docker-based approach ensures consistent, reproducible environments that can be deployed and torn down in seconds, making it an invaluable resource for hands-on security education and exploit development.