CTF Difficulty Cheatsheet (Vulnhub)

This cheatsheet is aimed at CTF players and beginners to help them sort Vulnhub Labs on the basis of their difficulty. We have performed and compiled this list based on our experience. Please share this with your connections and direct queries and feedback to Hacking Articles.

Follow us on

Table of Contents

• Easy
• Medium
• Hard

Easy ⤴

1. LAMPSecurity: CTF 4
2. LAMPSecurity: CTF 5
3. LAMPSecurity: CTF 7
4. Holynix: v1
5. pWnOS -1.0
6. pWnOS -2.0
7. DE-ICE:S1.120
8. Hackademic-RTB1
9. Tr0ll 1
10. 21 LTR: Scene1
11. Kioptrix : Level 1.1
12. Kioptrix : Level 1.2
13. Kioptrix : Level 1.3
14. Kioprtix: 5
15. SecOS: 1
16. Stapler
17. SickOS 1.1
18. SickOS 1.2
19. Simple
20. Kevgir
21. Milnet
22. Minotaur
23. Nullbyte
24. VulnOS: 1
25. VulnOS: 2.0
26. Freshly
27. Sedena
28. Nightmare
29. Orcus
30. Billu : B0x
31. Moria 1.1
32. Lazysysadmin
33. Bulldog
34. BTRSys:dv 2.1
35. BTRSys 1
36. RickdiculouslyEasy
37. Dina
38. Born2Root
39. G0rmint
40. Basic penetration
41. BSides Vancuver: 2018
42. Toppo:1
43. Billu Box 2
44. Basic Pentesting : 2
45. FourAndSix : 2
46. Jarbas : 1
47. Lampiao : 1
48. Fowsniff : 1
49. Typhoon : 1.02
50. DC-1
51. SP eric
52. DC-2
53. DC-3
54. Born2Root2
55. Sputnik 1
56. PumpkinGarden
57. PumpkinFestival
58. hackme1
59. Sunset
60. Ted:1
61. dpwwn: 1
62. The Library:2
63. WestWild: 1.1
64. dpwwn:2
65. Broken: Gallery
66. GrimTheRipper:1
67. Hack The Kioptrix Level-1
68. Seattle
69. Zorz
70. Pentester Lab: SQL Injection to Shell 1
71. Quaoar
72. Pluck
73. H.A.S.T.E.
74. Vulnhub Pentester Lab: S2-052
75. unknowndevice64 v2.0
76. Cewlkid:1
77. West Wild:2
78. Sunset: dawn
79. Misdirection 1
80. bossplayersCTF 1
81. Connect The Dots:1
82. Sar
83. My File Server:1
84. Sahu
85. Geisha:1
86. Katana
87. mhz_cxf:c1f
88. Nyx:1
89. Android4
90. Dc:7
91. Hacker Fest: 2019
92. EVM:1
93. Me and My Girlfreind:1
94. DevRandom CTF:1.1
95. Sumo:1
96. Victim:1
97. eLection:1
98. Sunset:decoy
99. CyberSploit:1
100. Loly:1
101. Sunset:Twilight
102. Sunset:Midnight
103. Chili:1
104. Healthcare:1
105. ShellDredd #1 Hannah
106. Mercury
107. HA: Narak:

Medium ⤴

1. LAMPSecurity: CTF 8
2. Xerxes:1
3. DE-ICE:S1.140
4. Hackademic-RTB2
5. Tr0ll 2
6. Skytower
7. PwnLab
8. Mr. Robot
9. Droopy
10. Sydney
11. Skydog
12. Tommyboy
13. Fristileaks
14. Spyder Sec
15. Acid
16. Lord of the Root
17. Acid Reloaded
18. Hackday Albania
19. Fortress
20. USV
21. Pipe
22. Fartknocker
23. Bot Challenge: Dexter
24. Defence Space
25. Super Mario
26. Donkey Docker
27. Analougepond
28. Zico 2
29. Covfefe
30. Depth
31. The Ether: Evil Science
32. DerpNStink
33. W1R3S.inc
34. Bob:1.0.1
35. The blackmarket
36. Blacklight:1
37. Golden Eye:1
38. Temple of Doom
39. Wakanda:1
40. ch4inrulz:1.0.1
41. MinU:1
42. Raven
43. Matrix:1
44. Raven:2
45. Escalate_Linux
46. Mercy
47. KFIOFan:1
48. RootThis:1
49. Kuya:1
50. Matrix:2
51. W34kn3ss 1
52. Casino Royale
53. Unknowndevice64:1
54. HackinOS:1
55. Web Developer:1
56. SP ike
57. DC6
58. DC-4
59. Development
60. Silky-CTF: 0x01
61. Bravery
62. DC-5
63. Happycorp:1
64. Symfonos:1
65. PumpkinRaising
66. Matrix-3
67. Symfonos:2
68. Beast 2
69. Joy
70. MinU:v2
71. Zeus:1
72. DomDom:1
73. SP:Jerome
74. The Library 1
75. Symfonos:3
76. Clamp 1.0.1
77. Tr0ll:3
78. CTF KFIOFAN:2
79. Nezuko:1
80. Serial: 1
81. Skydog Con
82. Padding Oracle
83. Pentester Lab: SQL Injection to Shell 2
84. Gibson
85. D0not5top
86. EW Skuzzy
87. 64 Base
88. Vulnupload
89. Lin.Security
90. AI:Web:1
91. Symfonos:4
92. Sunset: Nightfall
93. DC:7
94. AI:Web:2
95. Silky-CTF:0x02
96. HA: Infinity Stones
97. DC8
98. DC:9
99. CyNix:1
100. Symfonos:5
101. Five86:1
102. Five86:2
103. EnuBox:Mattermost
104. Inclusiveness:1
105. 2much:1
106. MuzzyBox:1
107. TBBT
108. VulnUni 1.0.1
109. TBBT:2
110. CengBox:1
111. DMV :1
112. CryptoBank:1
113. LAMPSecurity: CTF6
114. HA: Wordy
115. HA: Armour
116. HA: ISRO
117. HA: Joker
118. HA: Naruto
119. HA: Avengers Arsenal
120. HA: Rudra
121. HA: Chakravyuh
122. Gears of War: EP#1
123. djinn:1
124. HA: Chanakya
125. HA: Dhanush
126. In Plain Sight:1
127. UA: Literally Vulnerable
128. Sunset-Sunrise
129. Sunset: dusk
130. Zion:1.1
131. LemonSqueezy:1
132. Seppuku:1
133. HA: Natraj
134. HA: Pandavas
135. Glasgow Smile:1.1
136. GitRoot:1
137. Tre:1
138. BlackRose:1
139. GreenOptic:1
140. Presidential:1
141. Broken 2020:1
142. So Simple:1
143. Photographer 1
144. Star Wars:1
145. CengBox:2
146. Pwned-1
147. Relevant: 1
148. Panabee: 1
149. Maskcrafter: 1.1
150. HA: Forensics
151. KB-Vuln: 3
152. HA: Vedas
153. HA: Sherlock
154. Cybox:1
155. Hogwarts: Bellatrix
156. DevGuru:1
157. Tomato:1

Hard ⤴

1. DE-ICE:S1.130
2. Breach 1.0
3. Breach 2.1
4. Billy Madison
5. Necromancer
6. Cyberry:1
7. BSides London 2017
8. Game of Thrones
9. Trollcave
10. The Gemini inc
11. PinkyPalace
12. Violator
13. Bulldog 2
14. WinterMute:1
15. /dev/random:K2
16. Gemini inc:2
17. Moonranker:1
18. Replay:1
19. Torment
20. 6 Days
21. IMF
22. thewall
23. ROP Primer:1.0.1
24. USV:2017
25. C0m80
26. Teuchter
27. Durian:1
28. Prime:1
29. View2aKill
30. Tempus Fugit:1
31. Insanity:1
32. Jigsaw:1
33. Mumbai:1
34. PowerGrid:1.0.1
35. Tempus Fugit:1
36. Primer