Nua Security's open source benchmarks for Penetration Testing AI Agents
460
WARNING: This is a deliberately vulnerable application built for security training purposes only. It contains intentional vulnerabilities and must never be deployed in a production environment or used with real data.
A movie discovery and booking application with search, reviews, ticket generation, and an admin panel. Built with Flask, MySQL, phpMyAdmin, and Apache Tomcat. Contains 20 vulnerabilities spanning SQL injection, XSS, SSTI, IDOR, XXE, path traversal, SSRF, open redirects, and known CVEs.
Images are published at nuasecurity/nua-bench-lab-02.
docker compose pull
docker compose up -d --no-build
Content type
Image
Digest
sha256:dab0a802b…
Size
131.5 MB
Last updated
3 months ago
docker pull nuasecurity/nua-bench-lab-02:db