Skip to content


Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Latest commit


Git stats


Failed to load latest commit information.
Latest commit message
Commit time

Web Dōjō
Web Penetration Testing Lab

dōjō [doꜜː(d)ʑoː] : a hall for immersive learning or meditation.


Web Dōjō is a learning and testing environment for web application hacking and pentesting.

The lab includes a collection of vulnerable applications easy accessible through a landing page.

Available Applications

Quick Start

curl -sSL | bash

Manual Installation

The lab can be deployed either with Vagrant on its own VM or on any machine running Docker.

Clone and browse the repository:

git clone
cd webdojo



Using Vagrant (preferred)

Requirements: Vagrant and VirtualBox.

vagrant up

🥋 Done!
The dojo will be available at

Using Docker Compose

Requirements: Docker.

docker-compose up -d

🥋 Done!
The dojo will be available at

The Dojo

The dojo is a web application that serves as a menu for the available apps.

VirtualBox Network

When using Vagrant, the installation creates a Host-Only Network with address and DHCP disabled. The VM is attached to the network with the static IP

$ vboxmanage list hostonlyifs

Name:            vboxnet3
GUID:            786f6276-656e-4474-8000-0a0027000004
DHCP:            Disabled

If your pentesting machine lives in a different VM, add a new adaptor to it and attach it to the newly created network.

The IP has to be manually set inside the VM.

VirtualBox Network Dialog

Other Considerations

Why Docker Compose

Containers were initially built and started by iterating through a YAML file. Docker Compose removes complexity from the provisioner while adding flexibility to the deployment. This modularization allows not only to deploy on a VM but on any system running Docker.


Contributions are welcome, and they are greatly appreciated! Every little bit helps, and credit will always be given.

The best way to send feedback is to file an issue at