vvmlist

vulnerablevirtualmachinelist is a list of vulnerable vms with their attributes.

usage is easy:
> search vulnerable vm by name
> select a tag
> you can also chain tags in search bar like +vulnhub +easy or +smb +kernel exploit +rce

site is directly cloned from gtfobins repo so majority of the credits goes for them.
i only made small changes and filled with my own data.
changelog—license—contact

---

• n/a
• easy
• medium
• hard
• insane

• htb vip
• vulnhub
• pwk labs
• hackmyvm

• unix
• win
• htb vip
• vulnhub
• pwk labs
• hackmyvm
• n/a
• easy
• medium
• hard
• insane
• active directory
• as-rep
• authenticated rce
• bloodhound analysis
• bruteforce/decrypt/decode
• buffer overflow
• burp
• capabilities
• cewl
• cron/scheduled tasks
• cve
• dcsync
• default creds
• deserialization
• directory traversal
• dns
• docker
• finger
• ftp
• git
• hash/encrypted/encoded
• hidden file
• kerberoasting
• kernel exploit
• ldap
• library hijack
• local file inclusion
• log poisoning
• lxd/lxc
• mimikatz
• mount
• nfs
• nosqli
• packet or dump inspection
• path hijack
• pivot
• port knock
• powershell
• proxy
• rbash/restricted shell
• rce
• remote desktop
• remote file inclusion
• reverse shell
• rpc
• sam-system-security dump
• setenv
• smb
• smtp/pop/imap
• snmp
• source code inspection
• sql
• sql injection
• ssh
• ssh tunnel
• ssl
• stego
• stored creds
• sudo
• suid
• system binary exploit
• system/config/backup file
• telnet
• tftp
• user groups
• webdav
• winrm
• wordpress
• xml
• xss
• xxe

name	difficulty	platform	tags	url	walkthrough
access	easy	htb vip	win htb vip easy default creds ftp hash/encrypted/encoded mimikatz packet or dump inspection powershell smtp/pop/imap source code inspection system/config/backup file telnet		writeup 0xdf video ippsec
active	easy	htb vip	win htb vip easy active directory bruteforce/decrypt/decode hash/encrypted/encoded kerberoasting smb stored creds system/config/backup file		writeup 0xdf video ippsec
admirer	easy	htb vip	unix htb vip easy ftp packet or dump inspection path hijack setenv sql ssh stored creds sudo system/config/backup file		writeup 0xdf video ippsec
ai	medium	htb vip	unix htb vip medium burp cve sql injection ssh ssh tunnel stored creds		writeup 0xdf video ippsec
alzheimer	easy	hackmyvm	unix hackmyvm easy bruteforce/decrypt/decode ftp hash/encrypted/encoded hidden file port knock ssh stored creds suid system binary exploit		writeup d4t4s3c
apocalyst	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode hash/encrypted/encoded hidden file reverse shell stego stored creds system binary exploit wordpress		writeup 0xdf video ippsec
aragog	medium	htb vip	unix htb vip medium cron/scheduled tasks ftp rce sql ssh stored creds xml xxe		writeup 0xdf video ippsec
arctic	easy	htb vip	win htb vip easy bruteforce/decrypt/decode cron/scheduled tasks cve hash/encrypted/encoded kernel exploit local file inclusion rce reverse shell stored creds		writeup 0xdf video ippsec
bank	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode burp dns hash/encrypted/encoded rce reverse shell stored creds suid system binary exploit system/config/backup file		writeup 0xdf video ippsec
bart	medium	htb vip	win htb vip medium bruteforce/decrypt/decode log poisoning powershell reverse shell source code inspection stored creds		writeup 0xdf video ippsec
bashed	easy	htb vip	unix htb vip easy rce reverse shell sudo		writeup 0xdf video ippsec
bastard	medium	htb vip	win htb vip medium cve kernel exploit rce reverse shell		writeup 0xdf video ippsec
bastion	easy	htb vip	win htb vip easy bruteforce/decrypt/decode default creds hash/encrypted/encoded mount sam-system-security dump smb ssh system/config/backup file		writeup 0xdf video ippsec
beep	easy	htb vip	unix htb vip easy cve local file inclusion reverse shell ssh		writeup 0xdf video ippsec
bitlab	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode git pivot reverse shell source code inspection sql ssh stored creds system/config/backup file		writeup 0xdf video ippsec
blocky	easy	htb vip	unix htb vip easy ssh stored creds sudo wordpress		writeup 0xdf video ippsec
blue	easy	htb vip	win htb vip easy kernel exploit smb		writeup hackingarticles video ippsec
blunder	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode cewl cve hash/encrypted/encoded kernel exploit reverse shell stored creds sudo system/config/backup file		writeup 0xdf video ippsec
book	medium	htb vip	unix htb vip medium cve sql injection ssh stored creds suid xss		writeup 0xdf video ippsec
bounty	easy	htb vip	win htb vip easy burp cve kernel exploit reverse shell		writeup 0xdf video ippsec
brain	easy	hackmyvm	unix hackmyvm easy bruteforce/decrypt/decode cron/scheduled tasks local file inclusion ssh ssh tunnel		writeup windy
brainpan 1	easy	vulnhub	unix vulnhub easy buffer overflow sudo suid		writeup sevenlayers
buff	easy	htb vip	win htb vip easy cve rce reverse shell suid		writeup 0xdf video ippsec
calamity	hard	htb vip	unix htb vip hard buffer overflow rce reverse shell source code inspection ssh stego stored creds suid		writeup 0xdf video ippsec
canape	medium	htb vip	unix htb vip medium cve reverse shell ssh stored creds sudo		writeup 0xdf video ippsec
carrier	medium	htb vip	unix htb vip medium packet or dump inspection rce snmp ssh stored creds		writeup 0xdf video ippsec
cascade	medium	htb vip	win htb vip medium active directory bruteforce/decrypt/decode hash/encrypted/encoded ldap powershell rpc smb source code inspection stored creds system/config/backup file user groups		writeup 0xdf video ippsec
celestial	medium	htb vip	unix htb vip medium cron/scheduled tasks deserialization reverse shell		writeup 0xdf video ippsec
chaos	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode rbash/restricted shell rce smtp/pop/imap stored creds system/config/backup file		writeup 0xdf video ippsec
chatterbox	medium	htb vip	win htb vip medium cve reverse shell system binary exploit		writeup 0xdf video ippsec
colddbox	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode hash/encrypted/encoded reverse shell stored creds sudo system/config/backup file wordpress		writeup sevenlayers
connection	easy	hackmyvm	unix hackmyvm easy reverse shell smb suid		writeup 0xatom
covfefe	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode buffer overflow hash/encrypted/encoded hidden file ssh suid		writeup wjmccann
craft	medium	htb vip	unix htb vip medium docker git rce reverse shell source code inspection ssh stored creds system/config/backup file		writeup 0xdf video ippsec
cronos	medium	htb vip	unix htb vip medium burp cron/scheduled tasks dns rce reverse shell sql injection		writeup 0xdf video ippsec
crossroads	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cron/scheduled tasks stego suid
curling	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode cron/scheduled tasks cve hash/encrypted/encoded packet or dump inspection rce reverse shell source code inspection ssh stored creds system binary exploit system/config/backup file		writeup 0xdf video ippsec
cybox 1.1	easy	vulnhub	unix vulnhub easy local file inclusion log poisoning rce sudo		writeup hackingarticles
dab	hard	htb vip	unix htb vip hard bruteforce/decrypt/decode burp hash/encrypted/encoded library hijack rce source code inspection ssh stored creds suid		writeup 0xdf video ippsec
devel	easy	htb vip	win htb vip easy cve ftp kernel exploit rce reverse shell		writeup 0xdf video ippsec
devoops	medium	htb vip	unix htb vip medium git ssh xxe		writeup 0xdf video ippsec
djinn 1	easy	vulnhub	unix vulnhub easy ftp hash/encrypted/encoded rce reverse shell stored creds sudo
dominator	easy	hackmyvm	unix hackmyvm easy bruteforce/decrypt/decode dns hash/encrypted/encoded ssh stored creds suid system binary exploit		writeup arz101
driftingblues	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cron/scheduled tasks hash/encrypted/encoded source code inspection ssh suid
driftingblues2	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode reverse shell ssh sudo wordpress
driftingblues3	easy	hackmyvm	unix hackmyvm easy bruteforce/decrypt/decode hash/encrypted/encoded log poisoning path hijack rce source code inspection ssh suid		writeup skinny.3l3phant
driftingblues4	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cron/scheduled tasks ftp hash/encrypted/encoded path hijack source code inspection ssh stored creds
driftingblues5	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cron/scheduled tasks stego wordpress		writeup windy
driftingblues6	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cve kernel exploit reverse shell
dropzone	hard	htb vip	win htb vip hard suid system binary exploit system/config/backup file tftp		writeup 0xdf video ippsec
enterprise	medium	htb vip	unix htb vip medium buffer overflow reverse shell source code inspection sql injection stored creds suid system/config/backup file		writeup hackingarticles video ippsec
escalate_linux	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode burp cron/scheduled tasks cve rce reverse shell stored creds sudo suid system/config/backup file		writeup sevenlayers
europa	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode burp cron/scheduled tasks dns hash/encrypted/encoded rce reverse shell sql injection stored creds		writeup 0xdf video ippsec
flower	easy	hackmyvm	unix hackmyvm easy rce source code inspection sudo
fluxcapacitor	medium	htb vip	unix htb vip medium cron/scheduled tasks rce source code inspection		writeup 0xdf video ippsec
forest	easy	htb vip	win htb vip easy active directory as-rep bloodhound analysis bruteforce/decrypt/decode dns hash/encrypted/encoded ldap rpc smb system binary exploit user groups		writeup 0xdf video ippsec
forwardslash	hard	htb vip	unix htb vip hard bruteforce/decrypt/decode burp ftp hash/encrypted/encoded local file inclusion ssh stored creds sudo suid system/config/backup file xxe		writeup 0xdf video ippsec
friendzone	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode burp directory traversal dns hash/encrypted/encoded library hijack local file inclusion rce reverse shell smb source code inspection stored creds system/config/backup file		writeup 0xdf video ippsec
fristileaks 1.3	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode hash/encrypted/encoded hidden file reverse shell source code inspection sudo suid		writeup 5h4d0wb0y
frolic	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode buffer overflow burp cve rce reverse shell smb source code inspection stored creds suid		writeup 0xdf video ippsec
fuse	medium	htb vip	win htb vip medium active directory bruteforce/decrypt/decode cewl cve kernel exploit ldap rpc smb stored creds		writeup 0xdf video ippsec
giddy	medium	htb vip	win htb vip medium bruteforce/decrypt/decode cve hash/encrypted/encoded powershell sql injection stored creds suid		writeup 0xdf video ippsec
gift	easy	hackmyvm	unix hackmyvm easy bruteforce/decrypt/decode ssh		writeup infosecarticles
gigachad	easy	hackmyvm	unix hackmyvm easy bruteforce/decrypt/decode cve ftp ssh suid		writeup windy
goldeneye	easy	vulnhub	unix vulnhub easy authenticated rce bruteforce/decrypt/decode cve hash/encrypted/encoded kernel exploit reverse shell smtp/pop/imap source code inspection stego stored creds		writeup anonhack
grandpa	easy	htb vip	win htb vip easy cve kernel exploit reverse shell		writeup 0xdf video ippsec
granny	easy	htb vip	win htb vip easy cve kernel exploit reverse shell webdav		writeup 0xdf video ippsec
grotesque	medium	hackmyvm	unix hackmyvm medium bruteforce/decrypt/decode hash/encrypted/encoded reverse shell source code inspection stored creds		writeup by me ( ͡° ͜ʖ ͡°)
hacklab vulnix	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode kernel exploit nfs smtp/pop/imap ssh stored creds sudo		writeup sevenlayers
haircut	medium	htb vip	unix htb vip medium rce reverse shell suid system binary exploit		writeup 0xdf video ippsec
hawk	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode cron/scheduled tasks ftp hash/encrypted/encoded rce reverse shell ssh stored creds suid system/config/backup file		writeup 0xdf video ippsec
haystack	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode cron/scheduled tasks cve directory traversal hash/encrypted/encoded reverse shell stego stored creds suid system/config/backup file user groups		writeup 0xdf video ippsec
healthcare	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cve hash/encrypted/encoded path hijack reverse shell sql injection stored creds suid		writeup hackingarticles
heist	easy	htb vip	win htb vip easy bruteforce/decrypt/decode hash/encrypted/encoded hidden file packet or dump inspection rpc smb stored creds system/config/backup file winrm		writeup 0xdf video ippsec
help	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode cve hash/encrypted/encoded kernel exploit rce reverse shell stored creds		writeup 0xdf video ippsec
hemisphere lynx	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode hash/encrypted/encoded hidden file smb ssh stored creds		writeup razrsec
hommie	easy	hackmyvm	unix hackmyvm easy path hijack ssh suid tftp		writeup arz101
inception	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode cve local file inclusion proxy rce source code inspection ssh stored creds sudo system/config/backup file webdav		writeup hackingarticles video ippsec
infosec prep oscp	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode hash/encrypted/encoded ssh suid system binary exploit wordpress		writeup falconspy
insomnia	easy	hackmyvm	unix hackmyvm easy cron/scheduled tasks rce reverse shell sudo		writeup windy
irked	easy	htb vip	unix htb vip easy cve hidden file rce reverse shell stego stored creds suid		writeup 0xdf video ippsec
jarvis	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode cve hash/encrypted/encoded local file inclusion rce reverse shell sql injection stored creds sudo suid system binary exploit		writeup 0xdf video ippsec
jeeves	medium	htb vip	win htb vip medium bruteforce/decrypt/decode cve hash/encrypted/encoded hidden file kernel exploit rce reverse shell smb stored creds		writeup hackingarticles video ippsec
jerry	easy	htb vip	win htb vip easy default creds reverse shell		writeup 0xdf video ippsec
joker	hard	htb vip	unix htb vip hard bruteforce/decrypt/decode cron/scheduled tasks cve hash/encrypted/encoded proxy rce ssh stored creds sudo suid system binary exploit system/config/backup file tftp		writeup 0xdf video ippsec
kioptrix level 1.1	easy	vulnhub	unix vulnhub easy burp kernel exploit rce reverse shell sql injection		writeup kanishka
kioptrix level 1	easy	vulnhub	unix vulnhub easy cve kernel exploit rce reverse shell smb ssl		writeup abatchy
lacasadepapel	easy	htb vip	unix htb vip easy bruteforce/decrypt/decode directory traversal ssh ssl stored creds suid system/config/backup file		writeup 0xdf video ippsec
lame	easy	htb vip	unix htb vip easy cve smb		writeup 0xdf video haktools
lazy	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode burp hash/encrypted/encoded path hijack source code inspection ssh stored creds suid system/config/backup file		writeup 0xdf video ippsec
legacy	easy	htb vip	win htb vip easy cve kernel exploit		writeup 0xdf video haktools
lightweight	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode capabilities hash/encrypted/encoded packet or dump inspection ssh stored creds system/config/backup file		writeup 0xdf video ippsec
lin.security	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode hash/encrypted/encoded hidden file nfs ssh stored creds sudo system binary exploit		writeup hackso.me
locker	easy	hackmyvm	unix hackmyvm easy rce reverse shell suid		writeup windy
lord of the root 1.0	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cve hash/encrypted/encoded source code inspection sql sql injection stored creds system binary exploit		writeup alexandervoidstar
luke	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode ftp hash/encrypted/encoded rce stored creds system/config/backup file		writeup 0xdf video ippsec
m87	easy	vulnhub	unix vulnhub easy burp capabilities local file inclusion rce reverse shell sql injection stored creds suid		writeup h1t3sh
magic	medium	htb vip	unix htb vip medium packet or dump inspection rce reverse shell sql injection stored creds suid system/config/backup file user groups		writeup 0xdf video ippsec
mango	medium	htb vip	unix htb vip medium bruteforce/decrypt/decode burp nosqli ssh suid		writeup 0xdf video ippsec
masashi	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode ssh sudo		writeup skinny.3l3phant
metasploitable 2	easy	vulnhub	unix vulnhub easy bruteforce/decrypt/decode cve default creds deserialization ftp kernel exploit nfs packet or dump inspection rce remote desktop reverse shell smb smtp/pop/imap sql ssh stored creds system binary exploit telnet		writeup hackingarticles
mirai	easy	htb vip	unix htb vip easy default creds hidden file ssh sudo		writeup hackingarticles video ippsec