# Vt

> Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice security testing, set up CTF labs, exploit CVEs, or deploy vulnerable web apps like DVWA, Juice Shop, or WebGoat.

- **Type:** Skill
- **Install:** `agentstack add skill-happyhackingspace-skills-vt`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [HappyHackingSpace](https://agentstack.voostack.com/s/happyhackingspace)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [HappyHackingSpace](https://github.com/HappyHackingSpace)
- **Source:** https://github.com/HappyHackingSpace/skills/tree/main/skills/vt

## Install

```sh
agentstack add skill-happyhackingspace-skills-vt
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Vulnerable Target (vt)

vt is a Go CLI tool that creates intentionally vulnerable environments for security professionals, researchers, and educators using Docker Compose.

> **CAUTION**: vt creates intentionally vulnerable environments - always run in isolated networks (VMs/sandboxes) and never expose to the internet.

## Installation

### Prerequisites

- Go 1.24+
- Docker & Docker Compose

### Install with Go

```bash
go install github.com/happyhackingspace/vt/cmd/vt@latest
```

### Build from Source

```bash
git clone https://github.com/HappyHackingSpace/vt.git
cd vt
go build -o vt cmd/vt/main.go
mv vt /usr/local/bin/
```

## Command Reference

| Command | Description |
|---------|-------------|
| `vt template --list` | List all available templates |
| `vt template --list --filter ` | Filter templates by tag (sqli, xss, ssrf, etc.) |
| `vt template --update` | Update templates from remote repository |
| `vt start --id ` | Start a vulnerable environment |
| `vt start --tags ` | Start all templates matching tags |
| `vt ps` | List running environments |
| `vt stop --id ` | Stop an environment |
| `vt stop --tags ` | Stop all templates matching tags |
| `vt -v debug ` | Run with debug verbosity |

## Available Templates

| Template | Type | Description |
|----------|:----:|-------------|
| `vt-dvwa` | Lab | Damn Vulnerable Web Application |
| `vt-juice-shop` | Lab | OWASP Juice Shop |
| `vt-webgoat` | Lab | OWASP WebGoat |
| `vt-bwapp` | Lab | Buggy Web Application |
| `vt-mutillidae-ii` | Lab | OWASP Mutillidae II |

More templates at [vt-templates](https://github.com/HappyHackingSpace/vt-templates).

## Examples

```bash
# List templates with SQL injection vulnerabilities
vt template --list --filter sqli

# Start DVWA
vt start --id vt-dvwa

# Start all XSS-related labs
vt start --tags xss

# Check running environments
vt ps

# Stop a specific environment
vt stop --id vt-dvwa
```

## Use Cases

| Use Case | Template |
|----------|----------|
| Practice SQL Injection | vt-dvwa |
| Learn XSS Exploitation | vt-dvwa |
| Test OWASP Top 10 | vt-juice-shop |
| Exploit Real CVEs | vt-2025-29927 |
| API Security Testing | vt-webgoat |
| Train Security Teams | vt-mutillidae-ii |

## References

- Repository: https://github.com/HappyHackingSpace/vt
- Templates: https://github.com/HappyHackingSpace/vt-templates

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [HappyHackingSpace](https://github.com/HappyHackingSpace)
- **Source:** [HappyHackingSpace/skills](https://github.com/HappyHackingSpace/skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-happyhackingspace-skills-vt
- Seller: https://agentstack.voostack.com/s/happyhackingspace
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.