DockerLabs hosts 193 vulnerable machines designed to sharpen your ethical hacking skills through hands-on practice. Every machine is self-contained inside a Docker container, meaning you can spin up a target in seconds, hack it, and tear it down — no hardware required. This section of the Red Team Portfolio covers writeups for the Hacking Infraestructura category, walking through each machine from initial reconnaissance to root access using real-world techniques.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/V0rt3xS0urc3/RedTeam-Portfolio/llms.txt
Use this file to discover all available pages before exploring further.
Categories on DockerLabs
DockerLabs organises its content into five main categories. This portfolio currently focuses on Hacking Infraestructura, with the remaining categories in progress.| Category | Status |
|---|---|
| 🔧 Hacking Infraestructura | ✅ In Progress |
| 🌐 Hacking Web | 🚧 In Construction |
| 📝 Hacking CMS | 🚧 In Construction |
| 🐛 Bug Bounty | 🚧 In Construction |
| 🔀 Pivoting | 🚧 In Construction |
Difficulty Levels
Each machine is tagged with a difficulty level that determines the complexity of techniques required. The writeups in this section are all rated Muy Fácil (Very Easy) — the ideal starting point for anyone new to infrastructure hacking.| Level | Spanish | Description |
|---|---|---|
| Very Easy | Muy Fácil | Fundamental techniques, beginner-friendly enumeration and exploitation |
| Easy | Fácil | Basic CVEs, simple privilege escalation chains |
| Medium | Medio | Chained vulnerabilities, deeper enumeration, lateral movement |
| Hard | Difícil | Complex exploitation paths, advanced privilege escalation |
Available Writeups
All four machines below are rated Very Easy and cover foundational hacking infrastructure skills: port scanning, service exploitation, credential attacks, and privilege escalation.BorazuwarahCTF
Extract a hidden username from image metadata with exiftool, run a steghide extraction with stegseek, then brute-force SSH credentials with Hydra to gain access and escalate via a misconfigured
sudo rule.BreakMySSH
A focused SSH brute-force exercise. Enumerate the target with Nmap, then unleash Hydra against the SSH service using
rockyou.txt to land a direct root shell — no privilege escalation required.firsthacking
Exploit the classic vsftpd 2.3.4 backdoor via Metasploit and a manual netcat trigger. A great introduction to CVE-based exploitation and using searchsploit to find public exploits.
trust
Enumerate a web server with Gobuster to discover a hidden PHP page leaking a username, brute-force the SSH password with Hydra, then abuse a
sudo vim misconfiguration to escalate to root.Tools Used Across Writeups
Every machine in this section was attacked from a Kali Portable environment — a fully self-contained Docker-based Kali Linux station with GPU acceleration and 100+ pre-installed pentesting tools. You can read more about it at /kali-portable/overview. The core toolset across these writeups includes:- Nmap — Service and version scanning (
-sC -sV --min-rate) - Hydra — Dictionary-based brute force against SSH
- Gobuster — Web directory and file enumeration
- Metasploit — Module-based exploitation (vsftpd backdoor)
- stegseek / steghide / exiftool — Steganography and metadata analysis
- GTFOBins — Reference for sudo/SUID privilege escalation
All writeups use
172.17.0.2 as the target IP — the default address Docker assigns to the first container on the docker0 bridge network. Your machine may receive the same IP, but always confirm with the output of ./auto_deploy.sh.Launching Your Environment
Before attacking any machine, start your Kali Portable session in a second terminal window:Ctrl+C in the deploy terminal to stop and remove the container.