docker-patterns

name	docker-patterns
description	Setting up a practice lab for penetration testing techniques - Creating isolated environments for exploit development and testing - Building vulnerable application targets for training - Testing tools against known-vulnerable configurations - User says "lab", "docker lab.
origin	openclaw
version	0.2.0.2
compatibility	["openclaw","claude-code","cursor","windsurf"]
allowed-tools	["Bash","Read","Write","Edit","WebSearch","WebFetch"]
defense_triple_required	false
metadata	{"domain":"infrastructure","tool_count":0,"guide_count":5,"last_reviewed":"2026-07-26"}

Docker Patterns for Security Testing

Supplementary Files:

• payloads.md — Quick launch commands, additional lab configurations, evidence extraction patterns, and cleanup commands
• test-cases.md — Structured test cases for lab deployment, attack chain setup, evidence extraction, and safety verification

Summary

Docker Patterns skill domain covering infrastructure operations.

Domain: infrastructure

Use Cases

1. Vulnerable Web App Lab — Deploy intentionally vulnerable applications (DVWA, WebGoat, Juice Shop) for safe practice
2. Network Pentest Lab — Create multi-host network environments with routers, firewalls, and services for lateral movement practice
3. Attack Chain Lab — Build complete kill chain scenarios (initial access → persistence → exfiltration) in isolated containers
4. Disposable Testing — Spin up and tear down test environments without affecting host system or production infrastructure
5. Tool Validation — Test new security tools and exploits in a known, controlled environment before engagement use

Activation

• Setting up a practice lab for penetration testing techniques
• Creating isolated environments for exploit development and testing
• Building vulnerable application targets for training
• Testing tools against known-vulnerable configurations
• User says "lab", "docker lab", "test environment", "practice target"

Core Principle

Never test attack techniques against systems you don't own or have explicit authorization to test. Docker labs provide safe, legal environments for security practice and tool validation.

All lab environments bind to 127.0.0.1 only — never expose on public interfaces.

Pattern 1: Vulnerable Web App Lab

DVWA (Damn Vulnerable Web Application)

# docker-compose.dvwa.yml
version: '3.8'
services:
  dvwa:
    image: vulnerables/web-dvwa:latest
    ports:
      - "127.0.0.1:8080:80"