The Vulnerabilities Hub

Verified
We've verified that the organization vulhub controls the domain:
- vulhub.org
Learn more about verified organizations

Pinned Loading

vulhub vulhub Public

Pre-Built Vulnerable Environments Based on Docker-Compose

Dockerfile 19.8k 4.7k
java-chains java-chains Public

Vulhub Vulnerability Reproduction Designated Platform

Dockerfile 1.8k 145

Repositories

vulhub Public
Pre-Built Vulnerable Environments Based on Docker-Compose

vulhub/vulhub’s past year of commit activity

Dockerfile 19,775 MIT 4,719 18 24 Updated Sep 19, 2025
vulhub-org Public
Vulhub's homepage

vulhub/vulhub-org’s past year of commit activity

TypeScript 30 11 0 2 Updated Sep 15, 2025
CVE-2017-1000353 Public
jenkins CVE-2017-1000353 POC

vulhub/CVE-2017-1000353’s past year of commit activity

Java 56 62 0 1 Updated May 21, 2025
java-chains Public
Vulhub Vulnerability Reproduction Designated Platform

vulhub/java-chains’s past year of commit activity

Dockerfile 1,809 145 7 0 Updated Apr 5, 2025
rocketmq-attack Public
A command-line tool for testing RocketMQ vulnerabilities.

vulhub/rocketmq-attack’s past year of commit activity

Kotlin 13 MIT 0 1 0 Updated Feb 7, 2025
evil-ipp-server Public Forked from h2g2bob/ipp-server
A evil IPP server to reproduce CVE-2024-47177

vulhub/evil-ipp-server’s past year of commit activity

Python 6 BSD-2-Clause 34 0 1 Updated Sep 28, 2024
metersphere-plugin-Backdoor Public
This is a backdoor project for MeterSphere, do not use it in production environment!!! Forking from <https://github.com/metersphere/metersphere-plugin-DebugSampler>

vulhub/metersphere-plugin-Backdoor’s past year of commit activity

Java 7 0 0 0 Updated Aug 18, 2023
openfire-fastpath-plugin Public Forked from igniterealtime/openfire-fastpath-plugin
This is a evil openfire plugin, do not install it if you don't know what it is

vulhub/openfire-fastpath-plugin’s past year of commit activity

JavaScript 0 14 0 0 Updated Jun 18, 2023
JNDIExploit Public Forked from zzwlpx/JNDIExploit
A malicious LDAP server for JNDI injection attacks

vulhub/JNDIExploit’s past year of commit activity

Java 51 391 0 0 Updated Apr 29, 2023
java Public
Java every minor versions.

vulhub/java’s past year of commit activity

Dockerfile 73 35 0 2 Updated Apr 19, 2023