DC416: 2016

  • Name: DC416: 2016
  • Date release: 5 Dec 2016

Please remember that VulnHub is a free community resource so we are unable to check the machines that are provided to us. Before you download, please read our FAQs sections dealing with the dangers of running unknown VMs and our suggestions for "protecting yourself and your network. If you understand the risks, please download!


(Size: 873 MB)


(Size: 818 MB)


(Size: 1.1 GB)


(Size: 933 MB)


These four virtual machines were created by members of the VulnHub CTF Team for DefCon Toronto's first offline CTF.

They have been tested with VirtualBox, and will obtain an IP address via DHCP upon bootup. Difficulty ranges from beginner to intermediate.

Each machine has a landing page on port 80 which describes the number of flags it has, along with any additional rules or hints.


Dick Dastardly requires a DHCP in a class C range.

  • Filename: dc416-baffle.ova
  • File size: 873 MB
  • MD5: 8CB9608EDB8E0145B37520DDBD7D03A1
  • SHA1: 2C970DC7CECC9F19357A32B9647E3F532C14FC78

  • Filename: dc416-basement.ova
  • File size: 818 MB
  • MD5: 9176B197F48F7BDDC4FA882208F6A5DC
  • SHA1: E9803EBE2D27C250C6E16E7B049F157C237F1E39

  • Filename: dc416-dick_dastardly.ova
  • File size: 1.1 GB
  • MD5: 58C9391FFD82D8A36768D4649FF3D2CF
  • SHA1: ECE880CDD99B31F09CE084F6AC873294D8CC0527

  • Filename: dc416-fortress.ova
  • File size: 933 MB
  • MD5: 4DCCAE57D05399D1C689FCADF545368D
  • SHA1: 5E79D6134A8710A0AEDB8B6C6E6AB2EE5250F401

  • Format: Virtual Machine (Virtualbox - OVA)
  • Operating System: Linux

  • DHCP service: Enabled
  • IP address: Automatically assign