無須更換源，安裝docker-compose

apt install docker.io
docker -vdocker-compose #提示沒有，輸入y安裝mkdir -p /etc/docker
vi /etc/docker/daemon.json   #更換dockerhub國內源┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# cat /etc/docker/daemon.json
{"registry-mirrors": ["https://5j2dr5y5.mirror.aliyuncs.com"],"exec-opts": ["native.cgroupdriver=cgroupfs"],        "live-restore": true,"log-driver":"json-file","log-opts": {"max-size":"500m", "max-file":"3"},"storage-driver": "overlay2"
}git clone https://github.com/vulhub/vulhub.git  #失敗的話需要在宿主機下載zip傳入虛擬機

┌──(root?kali)-[/home/kali/vulhub-master]
└─# pwd
/home/kali/vulhub-master┌──(root?kali)-[/home/kali/vulhub-master]  #vulhub內包含多個漏洞，供信息安全工程師學習
└─# ls
LICENSE          base                   django             ffmpeg       gogs         jetty           magento        nginx      phpmyadmin  saltstack   thinkphp   yapi
*******

vulhub操作使用

以tomcat上傳漏洞為例，進入漏洞所在目錄，每個漏洞都會有一個環境啟動文件，用docker-compose啟動與停止。

構造環境（創建容器）? docker-compose up -d

刪除環境（刪除容器）? docker-compose down

┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# pwd
/home/kali/vulhub-master/tomcat/CVE-2017-12615┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker-compose up -dCreating network "cve-2017-12615_default" with the default driver
Building tomcat
Sending build context to Docker daemon  26.11kB
Step 1/3 : FROM vulhub/tomcat:8.5.19
******      ┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker ps           
CONTAINER ID   IMAGE                   COMMAND             CREATED         STATUS         PORTS                                       NAMES
1f3eaeb337bd   cve-2017-12615_tomcat   "catalina.sh run"   6 seconds ago   Up 4 seconds   0.0.0.0:8080->8080/tcp, :::8080->8080/tcp   cve-2017-12615_tomcat_1                                                                                                                                                       

測試結束記得刪除環境?docker-compose down

┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker-compose down        
Stopping cve-2017-12615_tomcat_1 ... done
Removing cve-2017-12615_tomcat_1 ... done
Removing network cve-2017-12615_default┌──(root?kali)-[/home/kali/vulhub-master/tomcat/CVE-2017-12615]
└─# docker ps          
CONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES

參考文檔：

vulhub的安裝與簡單使用_vulhub使用_西部壯仔的博客-CSDN博客