VulnHub
Repository of downloadable vulnerable-by-design virtual machines for offline practice.
Technical Architecture & Overview
VulnHub hosts hundreds of community-built vulnerable VM images that users download and attack in their own lab environments, with difficulty ratings and walkthroughs linked per machine. The site was acquired by OffSec and continues to serve its catalog. Machines cover web, privesc, and network exploitation themes across many difficulty levels.
Targeted Technical Use Cases
Offline lab practice with full machines when internet-hosted platforms are not an option.
Evaluation & Trade-offs
Core Strengths
- +Works entirely inside your own hypervisor.
- +Huge historical catalog with community walkthroughs.
- +Free access to every machine.
Trade-Offs & Limitations
- -No hosting or scoring; you run everything yourself.
- -Age of some machines shows in outdated software stacks.
Defensive Security Application
Safe reproduction of attack paths for defender training and detection testing.
Frequently Asked Questions
What is VulnHub?→
VulnHub hosts hundreds of community-built vulnerable VM images that users download and attack in their own lab environments, with difficulty ratings and walkthroughs linked per machine. The site was acquired by OffSec and continues to serve its catalog. Machines cover web, privesc, and network exploitation themes across many difficulty levels.
What is VulnHub used for?→
Offline lab practice with full machines when internet-hosted platforms are not an option.
What are the strengths of VulnHub?→
- +Works entirely inside your own hypervisor.
- +Huge historical catalog with community walkthroughs.
- +Free access to every machine.
What are the limitations of VulnHub?→
- +No hosting or scoring; you run everything yourself.
- +Age of some machines shows in outdated software stacks.
How is VulnHub used defensively?→
Safe reproduction of attack paths for defender training and detection testing.