Vicnum: 1.3


  • Name: Vicnum: 1.3
  • Date release: 18 Oct 2009



Please remember that VulnHub is a free community resource so we are unable to check the machines that are provided to us. Before you download, please read our FAQs sections dealing with the dangers of running unknown VMs and our suggestions for "protecting yourself and your network. If you understand the risks, please download!


VMvicnum13.zip

(Size: 303 MB)


A flexible web app showing vulnerabilities such as cross site scripting, sql injections, and session management issues. Helpful to IT auditors honing web security skills and setting up 'capture the flag'.

Source: https://owasp.org/index.php/Category:OWASP_Vicnum_Project


**Note: 'Bad virtual machine file'. You'll need to create a new virtual machine & attach the existing hard drive**


  • Filename: VMvicnum13.zip
  • File size: 303 MB
  • MD5: DB4E6598ECC978BCF5DE0DE48A1B1FA0
  • SHA1: 0C03C9BCEEA57D86205881DC30781380485E9F19


  • Format: Virtual Machine (VMware)
  • Operating System: Linux


  • DHCP service: Enabled
  • IP address: Automatically assign


  • *Broken*
  • Remote Vulnerability
  • Web Application


  • Cross-Site Scripting
  • SQL Injection