Vulhub
Vulhub is an open-source collection of pre-built vulnerable docker environments for security researchers and educators.
# Clone the repository
git clone --depth 1 https://github.com/vulhub/vulhub.git
# Enter the directory
cd vulhub/spring/CVE-2022-22947
# Start the environment
docker compose up -dWhy Use Vulhub?
Docker Based
All environments are built with Docker and Docker Compose, making them easy to deploy and isolate.
Real Vulnerabilities
Practice with real-world vulnerabilities in a safe, controlled environment for learning and research.
Well Documented
Each vulnerability comes with detailed documentation explaining the vulnerability and exploitation steps.
Latest Environments
View all environmentsGotenberg 8.30.1 ExifTool Argument Injection via PDF Metadata Values
Explore the Gotenberg 8.30.1 ExifTool Argument Injection via PDF Metadata Values vulnerability and learn how to exploit it.
GitLab Unauthenticated Arbitrary Local File Read
Explore the GitLab Unauthenticated Arbitrary Local File Read vulnerability and learn how to exploit it.
Langflow Public Flow Build API Unauthenticated Remote Code Execution
Explore the Langflow Public Flow Build API Unauthenticated Remote Code Execution vulnerability and learn how to exploit it.
Fastjson 1.2.83 Deserialization Remote Command Execution via jar Protocol
Explore the Fastjson 1.2.83 Deserialization Remote Command Execution via jar Protocol vulnerability and learn how to exploit it.
WordPress Pre-Auth RCE via REST API Batch Route Confusion and SQL Injection (wp2shell)
Explore the WordPress Pre-Auth RCE via REST API Batch Route Confusion and SQL Injection (wp2shell) vulnerability and learn how to exploit it.
Spring Framework Path Traversal via Jetty URI Parsing Inconsistency
Explore the Spring Framework Path Traversal via Jetty URI Parsing Inconsistency vulnerability and learn how to exploit it.
Ready to start your security research?
Explore our collection of vulnerable environments and enhance your security skills today.