git404hub

what is vulnerable_edge_trainer fr?

mr-r3b00t/vulnerable_edge_trainer — explained in plain English

Analysis updated 2026-05-18

9PythonAudience · developerComplexity · 4/5Setup · hard

tl;dr

A Docker based training gateway and proxy appliance for practicing network admin, logging, and firewall rules in a lab.

vibe map

mindmap
  root((vulnerable_edge_trainer))
    What it does
      Docker gateway appliance
      Forward proxy on port 3128
      Web and SSH management
    Tech stack
      Python
      Docker Compose
      Squid proxy
      iptables
    Use cases
      Practice firewall rule design
      Learn brute force defence tuning
      Review security event logs
    Audience
      Security students
      Lab instructors
    Concepts
      Objects groups zones locations
      Packet capture with tcpdump
      CSV log export

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Run a lab where students configure gateway and proxy firewall rules on a realistic appliance.

VIBE 2

Practice reviewing security event logs and tuning brute force protection thresholds.

VIBE 3

Teach the difference between layer 3/4 gateway filtering and layer 7 proxy hostname filtering.

what's the stack?

PythonDockerSquidiptablesFlaskgunicorn

how it stacks up fr

mr-r3b00t/vulnerable_edge_traineralirezarezvani/promptorayushk58/crawlyx
Stars999
LanguagePythonPythonPython
Last pushed2025-09-14
MaintenanceQuiet
Setup difficultyhardeasyeasy
Complexity4/52/52/5
Audiencedeveloperpm founderpm founder

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · hard time til it works · 1h+

Full gateway-mode labs need Docker macvlan networking knowledge to give the appliance its own LAN address.

in plain english

This project builds a practice gateway appliance for cybersecurity training labs. It is packaged as a Docker container that acts like a real network gateway or proxy device, so students can learn how to administer users, read logs, tune brute force defences, and lock down management access on something that behaves like a genuine piece of network hardware. It is meant for classrooms and labs only, not for production use. Once started with Docker Compose, the appliance can forward traffic for a whole network (acting as a default gateway with NAT) or run as a Squid forward proxy on port 3128 with full logging. Management happens through SSH on a published port, or through a web dashboard served over HTTPS with a self signed certificate. That dashboard lets an administrator create and edit user accounts, reset or change passwords, and review three kinds of logs: traffic flows through the gateway and proxy, every request made to the management interface itself, and a security event log covering logons, lockouts, and configuration changes. Logs can be paged through and exported as CSV files, with safeguards against spreadsheet formula injection built into the export. A rule engine lets students build ordered allow and deny rules based on protocol, ports, source and destination addresses, and hostnames, which get applied to both the gateway and the proxy paths. Addresses can be organized into reusable objects, groups, zones, and locations, and two starter locations covering private and public IP ranges are seeded automatically so common policies can be built with one click. There is also a packet capture feature using tcpdump, with limits on duration and file size, so captures can be downloaded and inspected afterward. Setup for a full network lab, where client machines route through the appliance, requires some Docker networking knowledge, such as configuring a macvlan network so the container gets its own address on the physical network. The README documents both this routed setup and a simpler Docker bridge based lab.

prompts (copy fr)

prompt 1
Walk me through setting up the macvlan network so this appliance can act as a real gateway for lab clients.
prompt 2
Explain how the objects, groups, zones, and locations hierarchy works for building firewall rules here.
prompt 3
Help me write an allow/deny rule set that blocks routed clients from reaching private network ranges.
prompt 4
How does the CSV export protect against spreadsheet formula injection in this project?

Frequently asked questions

what is vulnerable_edge_trainer fr?

A Docker based training gateway and proxy appliance for practicing network admin, logging, and firewall rules in a lab.

What language is vulnerable_edge_trainer written in?

Mainly Python. The stack also includes Python, Docker, Squid.

How hard is vulnerable_edge_trainer to set up?

Setup difficulty is rated hard, with roughly 1h+ to a first successful run.

Who is vulnerable_edge_trainer for?

Mainly developer.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.