> For the complete documentation index, see [llms.txt](https://itszaiden.gitbook.io/pentesting/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy.md).

# Very Easy

- [Vacaciones](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/vacaciones.md): Fast port scanning, service enumeration, SSH brute-forcing, and privilege escalation via sudo on /usr/bin/ruby.
- [Obsession](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/obsession.md): Exposed backup file revealed SSH credentials for russoski, and root was gained via sudo vim exploit.
- [TPRoot](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/tproot.md): Exploited vsftpd 2.3.4 backdoor with Metasploit to obtain an instant root shell.
- [Injection](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/injection.md): SQL injection on the login panel revealed plaintext SSH credentials, allowing direct access to the system.
- [Trust](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/trust.md): Hidden directory revealed SSH username, credentials were brute-forced with Hydra, and root was obtained via sudo vim.
- [FirstHacking](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/firsthacking.md): Exploited vsftpd 2.3.4 backdoor with Metasploit to gain instant root shell.
- [BreakMySSH](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/breakmyssh.md): Hydra brute-forced SSH root credentials, granting immediate root access.
- [Hedgehog](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/hedgehog.md): Themed username brute-forced with Hydra, pivoted from tails to sonic via sudo, and gained root through unrestricted sudo permissions.
- [BorazuwarahCTF](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/borazuwarahctf.md): Steganography revealed SSH username, brute-forced credentials with Hydra, and root was gained via passwordless sudo on /bin/bash.
- [Ejotapete](https://itszaiden.gitbook.io/pentesting/writeups/dockerlabs/very-easy/ejotapete.md): Drupalgeddon2 exploit granted www-data shell, and root was obtained via SUID find.