Hullu is a lightweight vulnerable Alpine Linux VM for cybersecurity education, ethical hacking practice, and isolated lab/CTF-style scenarios.

It includes DVWA, FlaskVA, DNS Lab, BIND 9, Apache, MariaDB/MySQL, phpMyAdmin, SSH/SFTP, and optional FTP/Samba practice.

Hullu 3 adds DNS Lab, BIND 9, FTP/Samba server support, and separate service accounts for Flask-based services compared with Hullu 2.

Use only in an isolated lab network. Do not expose this VM to the internet.

Hullu documentation and details:
https://github.com/kaledaljebur/hullu

FlaskVA:
https://github.com/kaledaljebur/FlaskVA

DVWA:
https://github.com/digininja/DVWA

Please contact me if you have any questions or suggestions.
Regards,
Kaled Aljebur.

Project Activity

See All Activity >

Follow Hullu Vulnerable System

Hullu Vulnerable System Web Site

Other Useful Business Software
99.99% Uptime for MySQL and PostgreSQL Databases Icon
99.99% Uptime for MySQL and PostgreSQL Databases

Sub-second maintenance. 2x read/write performance. Built-in vector search for AI apps.

Cloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.
Try Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of Hullu Vulnerable System!

Additional Project Details

Registered

2025-07-23
Report inappropriate content