{"id":30980,"date":"2024-12-04T06:26:00","date_gmt":"2024-12-04T06:26:00","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=30980"},"modified":"2026-04-17T18:07:36","modified_gmt":"2026-04-17T18:07:36","slug":"metarget-update-enhanced-open-source-cyber-range-with-over-330-vulnerabilities-and-seamless-one-click-recovery","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/metarget-update-enhanced-open-source-cyber-range-with-over-330-vulnerabilities-and-seamless-one-click-recovery\/","title":{"rendered":"Metarget Update: Enhanced Open-Source Cyber Range with Over 330 Vulnerabilities and Seamless One-Click Recovery"},"content":{"rendered":"\n

When researching vulnerabilities, we often find that environment setup takes up a significant amount of time, and in comparison, the actual time spent testing PoCs and exploits may be relatively short. Meanwhile, there are excellent security projects in the open-source community, such as Vulhub and VulApps, which package vulnerability scenarios into images, allowing researchers to quickly start working. However, these projects primarily focus on application vulnerabilities. So, what if we need to study vulnerabilities in underlying infrastructure, such as Docker, K8s, or operating system kernels?<\/p>\n\n\n\n

Metarget is dedicated to automating the construction of vulnerable scenarios in underlying infrastructure and multi-layer cloud-native environments.<\/p>\n\n\n\n

What is Metarget?<\/h2>\n\n\n\n

<\/p>\n\n\n

\n
\"Red<\/a>
Metarget: open-source cloud-native cyber range<\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Metarget is the industry’s first open-source cloud-native cyber range, designed to quickly and automatically build vulnerable cloud-native environments, ranging from simple to complex.<\/p>\n\n\n\n

Metarget supports the automated construction of two types of vulnerable scenarios: cloud-native components and containerized applications, enabling the generation of multi-node, multi-layer cloud-native cyber range.<\/p>\n\n\n\n

Metarget has been included in the CNCF Cloud Native Landscape<\/a>, has over 11,000 stars on GitHub, and is widely used by security researchers.<\/p>\n\n\n\n

Metarget effectively assists security researchers in learning about vulnerabilities, helps red and blue teams and penetration testers improve their cloud-native security offensive and defensive skills, and aids security product developers in testing the threat detection and response capabilities of cloud-native defense systems.<\/p>\n\n\n\n

Currently, Metarget supports over 330 vulnerabilities, covering program components such as Docker, K8s, runC, containerd, kernels, dangerous configurations, and risky mounts. It also covers scenarios such as container escape, privilege escalation, and denial of service. All these vulnerability environments support one-click automated deployment, eliminating the need for security researchers to set up environments manually.<\/p>\n\n\n\n

After receiving extensive user feedback, we identified some shortcomings in Metarget. Due to factors like network environment, Ubuntu version, and Docker version, the automatic installation of vulnerability environments through scripts sometimes fails, and locating the root cause of failure can be difficult. To address this, we have improved the original version of Metarget and launched Metarget 1.0.<\/p>\n\n\n\n

What’s New in Metarget 1.0<\/h2>\n\n\n\n