Automate container security assessment and escape-path discovery in Docker and Kubernetes.
npx skills add https://github.com/wgpsec/AboutSecurity --skill cdk-escape
Please help me install this Agent Skill. Skill: cdk-escape Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/cdk-escape Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill cdk-escape
CDK 帮助安全研究者在进入容器后快速评估逃逸风险、识别潜在逃逸点并进行信息收集。
在进入容器后，CDK 通过自动化评估容器环境、发现逃逸途径和敏感信息点，降低探索成本。
在获得容器 shell 后运行 CDK 评估以识别潜在逃逸路径。
High-intent search queries and answers about installing and using this skill.
To assess container escape risks after getting a shell, you can automate environment evaluation to detect privileged mode, capabilities, mount points, and Docker sockets, mapping potential escape paths for lateral movement.
Common Kubernetes container escape vectors include privileged container configurations, exposed Docker sockets, cgroup mount points, and Kubernetes service account credentials, which can be enumerated automatically to discover exploit paths.
This container security assessment requires no specific dependencies, utilizing a static binary capable of environment evaluation, exploit-path enumeration, and structured output, supporting integration with common container runtimes.
Yes, automated escape path discovery works for both Docker and Kubernetes environments by evaluating container runtimes, permissions, and service account credentials to identify viable escape vectors and inform lateral movement.
The best way to enumerate sensitive information inside a compromised container is running an automated assessment to detect runtime types, mount points, and Kubernetes credentials, reducing manual exploration cost and mapping structured escape paths.
jnotsknabExecute Python, Node.js, and shell scripts in Docker containers with pre-installed dependencies.
blacklanternsecurityIdentifies containerization and executes breakout techniques for Docker and Kubernetes.
infantesromeroadrianAnalyze container and Kubernetes breakout techniques for offensive security operations.
0xDarkMatterConfigure and enforce container orchestration patterns for Docker and Kubernetes deployments.
