docker-privesc

What problem does it solve?

This Skill solves the critical problem of escalating privileges from a compromised Docker container to full root access on the underlying host system, a common requirement in authorized penetration testing and red team engagements where containerized workloads serve as the initial access vector.

Core Features & Use Cases

• 5 Distinct Escape Techniques: Covers docker group volume mounting, docker socket abuse, privileged container exploitation, cgroup release_agent attacks, and prior privilege escalation forensics.
• Real-World Validation: Tested against production targets including fitness-chain and gov-finance-portal, with documented results and mitigation guidance.
• Use Cases: Post-RCE escalation after compromising a container via web exploits or API attacks, red team operations targeting containerized cloud and on-premises infrastructure, and security assessments of Docker deployment configurations.

Quick Start

Use the docker-privesc skill to assess your current Docker container's escape surface and execute the appropriate technique to gain root access to the underlying host system.