VulnHub Reviews and Details

Is VulnHub good?

Social recommendations and mentions

• High school teacher here, looking for any suggestions for labs I could set up on some older PCs where students can actually see and experience what they are doing.

  You could take a look at something like (vulnhub)[https://vulnhub.com/]. They have a bunch of vms that are intentionally vulnerable. Source: about 3 years ago

• What is a website that is intentionally vulnerable to some sort of 403 bypass?

  Try looking on https://vulnhub.com/ (self hosted). Source: about 3 years ago

• Any place for VM images with vulnerabilities?

  Https://vulnhub.com/ sounds like what you are lookin for. Source: over 3 years ago

• I’ll be going on a 14 hour flight soon but I’d love to keep going over tryhackme content. Right now I’m in the Web Fundamentals section in the very beginning. Any suggestions on what I could do offline on the plane?

  You can go to vulnhub.com and download a lot of the vulnerable machines that you will find in platforms like TryHackMe, HackTheBox, etc. Source: over 3 years ago

• Alternatives to htb?

  Https://tryhackme.com, https://parrot-ctfs.com. https://vulnhub.com, https://vulnmachines.com, https://picoctfs.org there are quite a few awesome platforms out there I created https://parrot-ctfs.com in my free time its full of awesome labs created by various people its smaller but so worth the time. Source: over 3 years ago

• GCIH sql

  Https://vulnhub.com/ might have some. Source: over 3 years ago

• i'm literally so far behind compared to everyone else!

  Vulnhub.com - A collection of vulnerable VMs to allow you to practice hands on techniques. Source: over 3 years ago

• how to get started with ctf

  Install Oracle Virtual Box and pop over to vulnhub.com - there's plenty there to keep you occupied for the weekend. Source: almost 4 years ago

• Best tool for hash cracking?

  I'm kind of new to the whole pentesting realm and trying to learn... I've taken the JPT course, working through The Cyber Mentor's Pentesting academy and completed the GIAC GPEN course. Next stop is OSCP - once my company pays for it anyways. While I wait for that to be paid for, I've been going through Hackthebox (just the starting point boxes so far) and looked into vulnhub.com however, it seems most of those... Source: over 4 years ago

• Whats some stuff I should learn or terms?

  Download a Kali Linux iso or a VM image from Offensive Security and play around with it on hackthebox.eu or downlaod some vulnerable images from vulnhub.com; you could also setup an image of Juice Shop for web app pentesting practice. Source: over 4 years ago

• Just starting out... building a lab recs?

  Vulnhub.com. It's basically a repo of vulnerable virtual machine images that you install yourself. You'd be all set since you already have a local VPN and two machines. Even though you're more experienced than a total newbie I'd still say that hackthebox.com and tryhackme.com are good resources, they both have some decent free stuff. Source: over 4 years ago

• Passed pentest+ and... on to graduation!

  For everyone who's looking for tips, nothing beats hands on use of the tools. Take some time and set up the demo labs. Once you've played around on there a bit, sharpen your skills with some boxes from vulnhub.com and hackthebox etc. Also, if you're taking the older version of the test, there are some really useful tips and tricks that you can get from going to a cohort so it's worth your time. Make sure to ask... Source: over 4 years ago

• Self hosted hacking lab

  For local environments, vulnhub.com and hackmyvm.eu are your best choice. Source: over 4 years ago

• How do people find ip of devices on a network

  TryHackMe will give you a good start, there are multiple sites that have target boxes like vulnhub.com but they dont always have writeups so not the best place to start. I do like hackmyvm.eu as there are quite a lot of writeups and discord - but its mainly CTF linux boxes. Source: over 4 years ago

• We are a security team with 20+ years of ethical hacking, and we've defended over 2 million attacks with Blumira. Ask Us Anything.

  I know a number of people like Cybrary for cybersecurity learning, most of these are instructed courses for those who like to learn this way. There's also hackthebox.eu and vulnhub.com for offensive testing - but none of those necessarily teach fundamentals of IT. As a general book Network Warrior is great at those networking fundamentals that live inside of IT generally. Source: almost 5 years ago

• What Certification to tackle next after Security+?

  So, I have a lab setup with VM's also tackling some HTB machines and vulnhub.com too. It's adding that to my resume for employers to see and being able to make it to the interview. Source: almost 5 years ago

• Good platforms and courses to pay for to improve security knowledge?

  TryHackMe.com is good for more hands on, both offensive and defensive. Pluralsight.com is amazing for just about any content you could want. Beyond that, I think an old PC with some VM's and youtube. I personally use all 3 of these, almost daily. Tools like Splunk and Security Onion have free versions, along with vulnhub.com to download vulnerable VM's to practice on, should help you get pretty well rounded. Source: about 5 years ago

• Thanks techmikeny for furthering my addiction

  It'd help your security journey as well. You could have a kali linux image connected to a vulnerable image from vulnhub.com within eve-ng. Then monitor the traffic real-time as wireshark is integrated for virtual links. The possibilities are endless........ENDLESS! Source: about 5 years ago

• How many years of professional IT, Software Engineering, etc experience did you have before you passed the exam.

  Tryhackme.com is great, hackthebox.eu is also good, offsec have proving grounds too, vulnhub.com is nice, join a community like TryHackMe as its great for beginners. Source: about 5 years ago

• So how do i start with hacking?

  While I was still reading it I downloaded VirtualBox and the Kali Linux ISO from the official website (just because it had everything preinstalled) to be used as my attacking machine (I didn't want to screw my operating system) and started downloading super-simple CTF vulnerable virtual machines from vulnhub.com. (the Kioptrix series, Hackademic 1 and 2 etc) and when I just couldn't figured it out I... Source: over 5 years ago