Intentionally vulnerable servers for security testing and exploitation practice.
WARNING: These are intentionally vulnerable systems. Deploy only in isolated environments for authorized testing.
| Folder | Version | CVEs | Description |
|---|---|---|---|
apache_2.4.49 |
Apache 2.4.49 | CVE-2021-41773, CVE-2021-42013 | Path traversal + RCE |
apache_2.4.25 |
Apache 2.4.25 | CVE-2017-3167, CVE-2017-3169 | Auth bypass + DoS |
node_serialize_1.0.0 |
Node.js 8.x + node-serialize 0.0.4 | CVE-2017-5941 | Deserialization RCE |
Each folder contains its own README.md with deployment commands, wipe/clean instructions, exploitation steps, and Metasploit usage.
| Setting | Value |
|---|---|
| IP | 15.160.68.117 |
| URL | https://gpigs.devergolabs.com |
| Port | 8080 |
| Health Check | /health |