Skip to content
#

vulnerable-vm

Here are 2 public repositories matching this topic...

Intentionally vulnerable Linux VM for pentest practice. Full chain: info-disclosure → .phtml upload-filter bypass (RCE) → credential reuse → sudo/GTFOBins privesc to root. Reproducible from source, build an x86 OVA or run natively on Apple Silicon (Lima).

  • Updated Oct 28, 2026
  • Shell

Add this topic to your repo

To associate your repository with the vulnerable-vm topic, visit your repo's landing page and select "manage topics."

Learn more