container-escape-techniques

To escape a privileged Docker container, this Skill details exploitation methods targeting the `--privileged` flag configuration to directly access the host system's devices and filesystem. It provides step-by-step instructions for leveraging misconfigurations to gain escalated privileges on the host machine.

Kubernetes pod escape techniques include exploiting `hostPath` volume mounts, kernel vulnerabilities, and container runtime weaknesses. This Skill provides specific strategies for breaking out of Kubernetes pods to achieve host system access and escalate privileges across the cluster.

You can identify your container environment by running `cat /proc/1/cgroup 2>/dev/null | grep -qi "docker|kubepods|containerd"`. This quick start command helps determine the specific containerization technology in use, which is essential for selecting the correct escape technique.

Yes, this Skill covers kernel and runtime exploitation techniques applicable to Docker, LXC, and containerd environments. It provides instructions for escaping containers by targeting underlying host system kernel vulnerabilities and runtime weaknesses.

After escaping the container boundary, methods for privilege escalation involve exploiting specific host system vulnerabilities. This Skill focuses on gaining escalated privileges on the host system by leveraging kernel exploits and runtime weaknesses once the initial escape is achieved.