Nua Security's open source benchmarks for Penetration Testing AI Agents
580
WARNING: This is a deliberately vulnerable application built for security training purposes only. It contains intentional vulnerabilities and must never be deployed in a production environment or used with real data.
A blogging platform with content management, user posts, comments, email feedback, and an admin panel. Built with Flask, MailHog, and PHPMailer. Contains 20 vulnerabilities spanning SQL injection, XSS, SSTI, IDOR, XXE, path traversal, SSRF, open redirects, and known CVEs.
Images are published at nuasecurity/nua-bench-lab-01.
cp CVE-2017-5223/.env.example CVE-2017-5223/.env
docker compose pull
docker compose up -d --no-build
Content type
Image
Digest
sha256:dad5b29e3…
Size
42.9 MB
Last updated
3 months ago
docker pull nuasecurity/nua-bench-lab-01:internal