container-escape-techniques

What problem does it solve?

This Skill equips penetration testers with advanced container escape techniques to bypass security measures and gain elevated privileges within Docker, LXC, or Kubernetes environments.

Core Features & Use Cases

• Privileged Container Escape: Provides methods to escape from a privileged container using filesystem mounts, namespace tricks, and capabilities.
• Docker Socket Escape: Demonstrates techniques to exploit the Docker socket for privilege escalation.
• Cgroup Abuse: Offers strategies for leveraging cgroup vulnerabilities for escaping containers.
• Namespace Escape: Explains methods to escape container namespaces, including user and PID namespaces.
• Runtime Vulnerabilities: Covers specific CVEs like runc and containerd vulnerabilities for exploiting runtime weaknesses.

Quick Start

Run the skill to get started with container escape techniques and explore various scenarios.