Learning Offensive Security with Project V^3: VulnHub + VirtualBox + Vagrant

The session opens as a Q&A following the talk, where the presenters take questions about Project V^3, a GitHub project that packages machines from VulnHub into Vagrant configurations for VirtualBox. The presenter explains that setup needs VirtualBox with its extension pack, Vagrant, and optionally git, after which a single command brings a lab up. Because the machines are free and the project removes common setup hurdles, it is aimed at newcomers who want to practice.

The discussion then moves to classroom use. By default the attacker and target machines sit on an isolated internal network with no internet or host access, which keeps risky machines contained. For a shared class setup, the presenter suggests moving the target to a bridged network on a central server, which needs extra network work such as VPN access for students. A correction was also made: the removal command must be the vagrant box remove form with the box name, and the README will be updated to reflect it.

The presenters closed by recognizing YoBlog, a machine that was used in a CactusCon 2016 root box competition and that teaches local file inclusion and database exfiltration. They invited exploit developers to contribute machines outside VulnHub. The presenter also described maintenance: of 624 VulnHub machines, 209 had been added so far, and the work proceeds from the newest machines to the oldest.