kali/ubuntu安装vulhub

无须更换源，安装docker-compose

apt install docker.io
docker -v

docker-compose #提示没有，输入y安装

mkdir -p /etc/docker
vi /etc/docker/daemon.json   #更换dockerhub国内源

┌──(root㉿kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# cat /etc/docker/daemon.json
{
  "registry-mirrors": ["https://5j2dr5y5.mirror.aliyuncs.com"],
  "exec-opts": ["native.cgroupdriver=cgroupfs"],        
  "live-restore": true,
  "log-driver":"json-file",
  "log-opts": {"max-size":"500m", "max-file":"3"},
  "storage-driver": "overlay2"
}

git clone https://github.com/vulhub/vulhub.git  #失败的话需要在宿主机下载zip传入虚拟机

┌──(root㉿kali)-[/home/kali/vulhub-master]
└─# pwd
/home/kali/vulhub-master
                                                                                                                                                                               
┌──(root㉿kali)-[/home/kali/vulhub-master]  #vulhub内包含多个漏洞，供信息安全工程师学习
└─# ls
LICENSE          base                   django             ffmpeg       gogs         jetty           magento        nginx      phpmyadmin  saltstack   thinkphp   yapi
*******

vulhub操作使用

以tomcat上传漏洞为例，进入漏洞所在目录，每个漏洞都会有一个环境启动文件，用docker-compose启动与停止。

构造环境（创建容器） docker-compose up -d

删除环境（删除容器） docker-compose down

┌──(root㉿kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# pwd
/home/kali/vulhub-master/tomcat/CVE-2017-12615
                                                                                                                                                                               
┌──(root㉿kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker-compose up -d

Creating network "cve-2017-12615_default" with the default driver
Building tomcat
Sending build context to Docker daemon  26.11kB
Step 1/3 : FROM vulhub/tomcat:8.5.19
******      

┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker ps           
CONTAINER ID   IMAGE                   COMMAND             CREATED         STATUS         PORTS                                       NAMES
1f3eaeb337bd   cve-2017-12615_tomcat   "catalina.sh run"   6 seconds ago   Up 4 seconds   0.0.0.0:8080->8080/tcp, :::8080->8080/tcp   cve-2017-12615_tomcat_1

测试结束记得删除环境 docker-compose down

┌──(root㉿kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker-compose down        
Stopping cve-2017-12615_tomcat_1 ... done
Removing cve-2017-12615_tomcat_1 ... done
Removing network cve-2017-12615_default
                                                                                                                                                                                      
┌──(root㉿kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker ps          
CONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES

参考文档：

vulhub的安装与简单使用_vulhub使用_西部壮仔的博客-CSDN博客

kali/ubuntu安装vulhub

悦读