Escalate Docker container privileges to host root access.
npx skills add https://github.com/uphiago/recon-skills --skill docker-privesc
Please help me install this Agent Skill. Skill: docker-privesc Source: https://github.com/uphiago/recon-skills/tree/main/infra/docker-privesc Command: npx skills add https://github.com/uphiago/recon-skills --skill docker-privesc
This Skill solves the critical problem of escalating privileges from a compromised Docker container to full root access on the underlying host system, a common requirement in authorized penetration testing and red team engagements where containerized workloads serve as the initial access vector.
Use the docker-privesc skill to assess your current Docker container's escape surface and execute the appropriate technique to gain root access to the underlying host system.
High-intent search queries and answers about installing and using this skill.
Docker container escape techniques include exploiting misconfigured docker group permissions, abusing mounted docker sockets, leveraging privileged container deployments, and executing cgroup release_agent attacks to gain host root access.
Common Docker misconfigurations that allow container escape include improper docker group permissions, mounted docker sockets, and privileged container deployments, all of which expose the underlying host system to root access.
Abusing a mounted docker socket allows a compromised container to interact with the host Docker daemon, enabling attackers to create new privileged containers that mount the host filesystem and escalate to root access.
Yes, post-exploitation forensics can be performed on a compromised Docker container to identify prior privilege escalation indicators, assess configuration checks, and validate previous exploitation attempts on the host system.
Yes, Docker container escape validation specifically applies to authorized red team operations and penetration testing scenarios where initial access is gained through containerized workloads in cloud or on-premises infrastructure.
A cgroup release_agent attack exploits privileged containers by writing a payload to the host cgroup release_agent file, executing arbitrary commands as root on the underlying host system when a cgroup process terminates.
blacklanternsecurityIdentifies containerization and executes breakout techniques for Docker and Kubernetes.
robit-manAudit Docker and Kubernetes environments for security risks and compromise indicators.
uphiagoDetect Kubernetes and Docker security misconfigurations and privilege escalation paths.
EntroVyxIdentify and exploit Docker privilege escalation vulnerabilities to achieve host root access.
