heywoodlh/vulnerable repository overview

Deliberately vulnerable Docker image. Relies heavily on Metasploitable3⁠'s Chef playbooks.

Example command to expose all the services running in the container:

docker run -it --rm -p 21:21 -p 22:22 -p 80:80 -p 445:445 -p 631:631 -p 3000:3000 -p 3500:3500 -p 6697:6697 -p 3306:3306 -p 8181:8181 heywoodlh/vulnerable

Example command to run the container and only expose Apache and SMB:

docker run -it --rm -p 80:80 -p 139:139 -p 445:445 heywoodlh/vulnerable

Here are all the ports and services that run in the container⁠.

Dockerfile and other assets located here: https://github.com/heywoodlh/dockerfiles/tree/master/vulnerable⁠

Most of the services running in the container are identical to Metasploitable3. Check out the Metasploitable3 wiki for more info on how to get started⁠.