메뉴
Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice security testing, set up CTF labs, exploit CVEs, or deploy vulnerable web apps like DVWA, Juice Shop, or WebGoat.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Classify HTML pages, forms, and fields using machine learning. Use when the user needs to detect page types (login, error, captcha), identify form types (login, search, registration), or classify form fields (username, password, email) from HTML content or URLs.
Parse, modify, encode, decode, and deduplicate URLs from the command line. Use when the user needs to extract URL components, manipulate URLs, encode/decode URL strings, or deduplicate URL lists for security testing or web automation.
High-performance Python HTTP client with browser impersonation and anti-bot evasion. Use when the user needs to bypass bot detection, impersonate browsers with TLS fingerprinting, make HTTP/2/3 requests, or build web scrapers that evade anti-bot systems.
Execute code in sandboxed environments using Docker, Podman, Wasmer, gVisor, Firecracker, Kubernetes, or cloud providers. Use when the user needs to safely run untrusted code, build AI code execution pipelines, or set up isolated sandbox environments.
| name | vt |
| description | Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice security testing, set up CTF labs, exploit CVEs, or deploy vulnerable web apps like DVWA, Juice Shop, or WebGoat. |
vt is a Go CLI tool that creates intentionally vulnerable environments for security professionals, researchers, and educators using Docker Compose.
CAUTION: vt creates intentionally vulnerable environments - always run in isolated networks (VMs/sandboxes) and never expose to the internet.
go install github.com/happyhackingspace/vt/cmd/vt@latest
git clone https://github.com/HappyHackingSpace/vt.git
cd vt
go build -o vt cmd/vt/main.go
mv vt /usr/local/bin/
| Command | Description |
|---|---|
vt template --list | List all available templates |
vt template --list --filter <tag> | Filter templates by tag (sqli, xss, ssrf, etc.) |
vt template --update | Update templates from remote repository |
vt start --id <template-id> | Start a vulnerable environment |
vt start --tags <tag1,tag2> | Start all templates matching tags |
vt ps | List running environments |
vt stop --id <template-id> | Stop an environment |
vt stop --tags <tag1,tag2> | Stop all templates matching tags |
vt -v debug <command> | Run with debug verbosity |
| Template | Type | Description |
|---|---|---|
vt-dvwa | Lab | Damn Vulnerable Web Application |
vt-juice-shop | Lab | OWASP Juice Shop |
vt-webgoat | Lab | OWASP WebGoat |
vt-bwapp | Lab | Buggy Web Application |
vt-mutillidae-ii | Lab | OWASP Mutillidae II |
More templates at vt-templates.
# List templates with SQL injection vulnerabilities
vt template --list --filter sqli
# Start DVWA
vt start --id vt-dvwa
# Start all XSS-related labs
vt start --tags xss
# Check running environments
vt ps
# Stop a specific environment
vt stop --id vt-dvwa
| Use Case | Template |
|---|---|
| Practice SQL Injection | vt-dvwa |
| Learn XSS Exploitation | vt-dvwa |
| Test OWASP Top 10 | vt-juice-shop |
| Exploit Real CVEs | vt-2025-29927 |
| API Security Testing | vt-webgoat |
| Train Security Teams | vt-mutillidae-ii |