When I started at Xebia in 2015, Docker was hip and new and I wanted to understand it better. As I was getting tired of continuously rebuilding vulnerable testing environments I thought it was a nice idea to see if I could put them all in 1 docker container, so that a simple restart would refresh everything. I also wanted to see if I could break docker by putting so many things in 1 container. Turns out docker is really flexible and has no problem with running multiple webservers and databases at the same time. In 2017 I lost interest in the project as I was no longer using it and I didn't feel like maintaining all the dependencies anymore. In 2022 @commjoen challenged me to revamp the project, so here we are :)
This is a very bad idea and probably one of the best examples of how not to use docker.
DVXTE is a docker container with several vulnerable applications. By using a docker container it's easy to setup and can easily be reset to it's starting point.
Currently the container contains the following tools and applications:
Vulnerable applications:
- Juiceshop https://github.com/bkimminich/juice-shop
- Railsgoat https://github.com/OWASP/railsgoat
- django.NV https://github.com/nVisium/django.nV
- Buggy Bank https://www.mavensecurity.com/about/webmaven/
Exercise Environments
- WebGoat https://github.com/WebGoat/WebGoat
- DVWA https://github.com/digininja/DVWA
- Mutilidae II https://github.com/webpwnized/mutillidae
Challenge labs
- WrongSecrets https://github.com/commjoen/wrongsecrets
- CryptOMG https://github.com/SpiderLabs/CryptOMG
- FileUploadLab https://github.com/LunaM00n/File-Upload-Lab
- DVGQL https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application
Tools
- Mailcatcher https://mailcatcher.me/
- Supervisor http://supervisord.org/
Once build, the image currently has a size of roughly 2.6 GB
Releases will be pushed to dockerhub; you can pull a compressesed and pre-build version at: https://hub.docker.com/r/dvsteinqx/dvxte
When you pull the image, make sure you add the version number, like e.g.:
docker pull dvsteinqx/dvxte:0.2
after pulling the image you can run it with the following command:
docker run --name dvxte -p 80:80 -p 1080:1080 -p 3000:3000 -p 4000:4000 -p 5013:5013 -p 8000:8000 -p 8200:8200 -p 8300:8300 -p 8400:8400 -p 9000:9000 dvsteinqx/dvxte
