Hullu is a lightweight vulnerable Alpine Linux VM for cybersecurity education, ethical hacking practice, and isolated lab/CTF-style scenarios.
It includes DVWA, FlaskVA, DNS Lab, BIND 9, Apache, MariaDB/MySQL, phpMyAdmin, SSH/SFTP, and optional FTP/Samba practice.
Hullu 3 adds DNS Lab, BIND 9 interface, FTP/Samba server support, and separate service accounts for Flask-based services compared with Hullu 2.
Use only in an isolated lab network. Do not expose this VM to the internet.
Hullu documentation and details:
https://github.com/kaledaljebur/hullu
FlaskVA:
https://github.com/kaledaljebur/FlaskVA
DVWA:
https://github.com/digininja/DVWA
Please contact me if you have any questions or suggestions.
Regards,
Kaled Aljebur.
Project Samples
