In this episode, I share a short list of virtual landmines you'll want to avoid when building your vulnerable VM for vulnhub.com:

  • Don't f up your mysql root password
  • Remember that Web services may install with a hard coded IP so you'll need to account for that when the machine is templated and then booted on different subnets
  • Watch out for IPv6! It can mess up a lot of the maintenance scripts you may have to implement to accommodate for IP address changes.