Lab26: 1


  • Name: Lab26: 1
  • Date release: 23 Apr 2017



Lab26.ova

(Size: 1003 MB)


For a while now I've been maintaining a VM I with several vulnerable web apps already deployed:

  • bWAPP
  • Mutillidae (nowasp)
  • DVWA
  • Django.nV
  • Google Gruyere
  • Web for Pentester I (from pentesterlab.com)

The VM has Burp Suite free, chromium with a few extensions (including a proxy switcher) and sqlmap. There are a few suggested exercises in a text file on the desktop.

User credentials:

root // password
tux // password




  • Filename: Lab26.ova
  • File size: 1003 MB
  • MD5: 5B29B484DCECB0B3D9EBC293ED816AB7
  • SHA1: 5FB5D38B466B990D4A85FD8BBCC15A6197299355


  • Format: Virtual Machine (Virtualbox - OVA)
  • Operating System: Linux


  • DHCP service: Enabled
  • IP address: Automatically assign