skills.rest
blacklanternsecurity
blacklanternsecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

container-escapes

Identifies containerization and executes breakout techniques for Docker and Kubernetes.

253|37|Updated Feb 22, 2026
Search Tags:#security#privilege escalation#cve#container escape#docker breakout#kubernetes exploitation
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill container-escapes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: container-escapes
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/network/container-escapes
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill container-escapes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires kubectl, crictl, ctr, CDK, deepce, amicontained, linpeas, curl, nsenter, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps penetration testers escape from containerized environments like Docker and Kubernetes pods, or exploit misconfigurations in these systems to gain broader access.

Core Features & Use Cases

  • Container Detection: Identifies if you are inside a container and its type.
  • Escape Techniques: Provides methods to break out of Docker, privileged containers, and Kubernetes pods using various vulnerabilities and misconfigurations.
  • Kubernetes Exploitation: Leverages service account tokens, Kubelet APIs, and etcd access to escalate privileges within a cluster.
  • Use Case: You've gained shell access to a Docker container running a web application. Use this Skill to escape the container and gain root access to the underlying host machine.

Quick Start

Use the container-escapes skill to attempt to break out of the current container environment.

Frequently Asked Questions about container-escapes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I escape a Docker container and get root on the host?▼

You can escape a Docker container by exploiting misconfigurations like exposed Docker sockets or privileged container flags. This Skill automates host resource enumeration and executes breakout techniques to gain underlying root access.

How do I exploit Kubernetes service account tokens for privilege escalation?▼

Kubernetes service account tokens can be abused to escalate privileges within a cluster. This Skill leverages token extraction, Kubelet API access, and etcd data extraction to expand cluster control.

What is the best way to detect if I am inside a containerized environment?▼

Container detection involves checking system fingerprints and runtime artifacts to identify containerization. This Skill uses enumeration tools like amicontained and deepce to verify the environment and its type.

Can I use linpeas and CDK to enumerate Kubernetes cluster resources?▼

Yes, linpeas and CDK are supported dependencies for enumerating host and cluster resources. This Skill utilizes these tools alongside kubectl and crictl to map internal environments and identify escape vectors.

How do I exploit common CVEs and misconfigurations in Kubernetes pods?▼

Exploiting Kubernetes pods involves targeting known CVEs and misconfigurations like exposed Kubelet APIs. This Skill identifies these vulnerabilities and executes targeted breakout techniques to compromise the cluster.

Does this Skill support Docker socket manipulation for container breakouts?▼

Yes, Docker socket manipulation is a core breakout technique. This Skill facilitates escaping containers by interacting with exposed Docker sockets to execute commands on the underlying host.

Related Skills

Explore More Software Engineering Skills→
ssmleossmleo

gke-app-onboarding

Automate containerization and deployment of applications to Google Kubernetes Engine.

Community
Intermediate
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
jassicsjassics
6

network-pentest

Automate authorized network penetration testing from host discovery to post-exploitation.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced