Vt
Agent Skills for Happy Hacking Space's open-source security tools. Compatible with Claude Code, OpenAI Codex, Gemini CLI, and Cursor.
npx -y skills add HappyHackingSpace/skills --skill vtAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 4 stars4 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice security testing, set up CTF labs, exploit CVEs, or deploy vulnerable web apps like DVWA, Juice Shop, or WebGoat.
SKILL.md
2.6 KB, as published. Nobody here has run it
Vulnerable Target (vt)
vt is a Go CLI tool that creates intentionally vulnerable environments for security professionals, researchers, and educators using Docker Compose.
CAUTION: vt creates intentionally vulnerable environments - always run in isolated networks (VMs/sandboxes) and never expose to the internet.
Installation
Prerequisites
- Go 1.24+
- Docker & Docker Compose
Install with Go
go install github.com/happyhackingspace/vt/cmd/vt@latest
Build from Source
git clone https://github.com/HappyHackingSpace/vt.git
cd vt
go build -o vt cmd/vt/main.go
mv vt /usr/local/bin/
Command Reference
| Command | Description |
|---|---|
vt template --list | List all available templates |
vt template --list --filter <tag> | Filter templates by tag (sqli, xss, ssrf, etc.) |
vt template --update | Update templates from remote repository |
vt start --id <template-id> | Start a vulnerable environment |
vt start --tags <tag1,tag2> | Start all templates matching tags |
vt ps | List running environments |
vt stop --id <template-id> | Stop an environment |
vt stop --tags <tag1,tag2> | Stop all templates matching tags |
vt -v debug <command> | Run with debug verbosity |
Available Templates
| Template | Type | Description |
|---|---|---|
vt-dvwa | Lab | Damn Vulnerable Web Application |
vt-juice-shop | Lab | OWASP Juice Shop |
vt-webgoat | Lab | OWASP WebGoat |
vt-bwapp | Lab | Buggy Web Application |
vt-mutillidae-ii | Lab | OWASP Mutillidae II |
More templates at vt-templates.
Examples
# List templates with SQL injection vulnerabilities
vt template --list --filter sqli
# Start DVWA
vt start --id vt-dvwa
# Start all XSS-related labs
vt start --tags xss
# Check running environments
vt ps
# Stop a specific environment
vt stop --id vt-dvwa
Use Cases
| Use Case | Template |
|---|---|
| Practice SQL Injection | vt-dvwa |
| Learn XSS Exploitation | vt-dvwa |
| Test OWASP Top 10 | vt-juice-shop |
| Exploit Real CVEs | vt-2025-29927 |
| API Security Testing | vt-webgoat |
| Train Security Teams | vt-mutillidae-ii |
References
- Repository: https://github.com/HappyHackingSpace/vt
- Templates: https://github.com/HappyHackingSpace/vt-templates