Lab26: 1.1

  • Name: Lab26: 1.1
  • Date release: 27 Jun 2017

Please remember that VulnHub is a free community resource so we are unable to check the machines that are provided to us. Before you download, please read our FAQs sections dealing with the dangers of running unknown VMs and our suggestions for "protecting yourself and your network. If you understand the risks, please download!

(Size: 1.6 GB)

For a while now I've been maintaining a VM I with several vulnerable web apps already deployed:

  • bWAPP
  • Mutillidae (nowasp)
  • Web for Pentester I (from
  • DVWA
  • Django.nV
  • Google Gruyere
  • OWASP Juice Shop

The VM has Burp Suite free, chromium with a few extensions (including a proxy switcher) and sqlmap. The browser home page contains links to some exercises and walkthroughs.

User credentials:

root // password
tux // password

v1.0 - 23/04/2017 v1.1 - 27/06/2017

  • Filename:
  • File size: 1.6 GB
  • MD5: 374F0B8D2B9B9E63D20BD3A58C98396C
  • SHA1: 58A965BABEAC983DAE7AC4F32D361B74C29A4FA0

  • Format: Virtual Machine (Virtualbox - OVA)
  • Operating System: Linux

  • DHCP service: Enabled
  • IP address: Automatically assign