# LAB ONLY
# 该编排仅用于本地或隔离测试环境中的授权攻防实验。
# 如需暴露到公网，请确保资产由你方控制且具备明确授权。

services:
  dvwa:
    image: vulnerables/web-dvwa:latest
    container_name: dvwa
    ports:
      - "8080:80"
    environment:
      - DB_SERVER=db
      - DB_USER=dvwa
      - DB_PASS=dvwa
      - DB_NAME=dvwa
    depends_on:
      - dvwa-db
    networks:
      - vulnlab
    restart: unless-stopped

  dvwa-db:
    image: mysql:5.7
    container_name: dvwa-db
    environment:
      - MYSQL_ROOT_PASSWORD=root
      - MYSQL_DATABASE=dvwa
      - MYSQL_USER=dvwa
      - MYSQL_PASSWORD=dvwa
    networks:
      - vulnlab
    restart: unless-stopped

  webgoat:
    image: webgoat/webgoat:latest
    container_name: webgoat
    ports:
      - "8081:8080"
      - "9090:9090"
    networks:
      - vulnlab
    restart: unless-stopped

  pikachu:
    image: area393/pikachu:latest
    container_name: pikachu
    ports:
      - "8082:80"
    networks:
      - vulnlab
    restart: unless-stopped

  bwapp:
    image: raesene/bwapp:latest
    container_name: bwapp
    ports:
      - "8083:80"
    networks:
      - vulnlab
    restart: unless-stopped

  sqlilabs:
    image: acgpiano/sqli-labs:latest
    container_name: sqlilabs
    ports:
      - "8084:80"
    networks:
      - vulnlab
    restart: unless-stopped

  xss-labs:
    image: c0ny1/xss-labs:latest
    container_name: xss-labs
    ports:
      - "8085:80"
    networks:
      - vulnlab
    restart: unless-stopped

networks:
  vulnlab:
    driver: bridge