> For the complete documentation index, see [llms.txt](https://itszaiden.gitbook.io/pentesting/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy.md).

# Easy

- [Backend](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/backend.md): Fast port scanning, service enumeration, SQL injection to extract credentials, SSH login as user pepe, and privilege escalation via SUID abuse on /usr/bin/grep and /usr/bin/ls.
- [BuscaLove](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/buscalove.md): WordPress parameter fuzzing exposed users, SSH access gained via cracked credentials, and root obtained by abusing sudo cat to read and crack /etc/shadow.
- [JenkHack](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/jenkhack.md): Exposed credentials granted Jenkins admin, RCE was achieved via reverse shell, and root was obtained by abusing sudo on a custom bash script.
- [ChocolateLovers](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/chocolatelovers.md): Default creds on Nibbleblog led to PHP RCE, escalated via sudo PHP to chocolate and persistence on root’s script to obtain root shell.
- [Amor](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/amor.md)
- [AguaDeMayo](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/aguademayo.md)
- [DockerLabs](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/dockerlabs.md): Upload bypass with .phar led to RCE as www-data, and root was obtained by abusing sudo grep to read the root password.
- [Escolares](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/escolares.md)
- [Psycho](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/psycho.md): LFI revealed SSH key for vaxei, sudo Perl allowed horizontal pivot to luisillo, and root was gained via Python library hijacking in paw.py.
- [PequeñasMentirosas](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/pequenasmentirosas.md): Weak SSH creds for a gave access, an MD5 hash revealed spencer’s password, and root was obtained via sudo python3.
- [Grooti](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/grooti.md): Database creds led to custom wordlist, SSH access as grooti, and root was gained via cron job abuse on cleanup.sh.
- [WhereIsMyWebShell](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/whereismywebshell.md)
- [NodeClimb](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/nodeclimb.md): Anonymous FTP leak exposed a ZIP with SSH creds, and root was gained via writable Node.js script executed with sudo.
- [Library](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/library.md): Hydra brute force with leaked password revealed SSH creds, and root was gained via Python library hijacking in script.py.
- [Candy](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/candy.md): Decoded Joomla admin creds from robots.txt, gained shell via template injection, and escalated to root by abusing sudo dd as luisillo.
- [Verdejo](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/verdejo.md)
- [Upload](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/upload.md): Unrestricted file upload enabled PHP reverse shell, and root was obtained via sudo env.
- [WalkingCMS](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/walkingcms.md): WordPress admin brute force enabled reverse shell upload, and root was obtained via SUID env.
- [Mirame](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/mirame.md): Stego in hidden image revealed SSH creds for carlos, and root was obtained via SUID find.
- [ShowTime](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/showtime.md)
- [Pinguinazo](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/pinguinazo.md)
- [PingCTF](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/pingctf.md): Command injection in the web ping endpoint yielded a reverse shell as a low-privilege user and root via SUID /usr/bin/vim.basic.
- [Allien](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/allien.md)
- [ConsoleLog](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/consolelog.md)
- [Move](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/move.md)
- [Internal](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/internal.md)
- [VulnVault](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/vulnvault.md)
- [Extraviado](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/extraviado.md)
- [Paradise](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/paradise.md)
- [WinterFell](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/winterfell.md)
- [Autoescuela](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/autoescuela.md)
- [WarGames](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/wargames.md)
- [File](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/file.md)
- [BaluFood](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/easy/balufood.md)