sandbox-escape-techniques

Identify sandbox isolation types and select escape strategies for Python, seccomp, chroot, and container environments.

5|2|Updated May 16, 2026
One-click install
npx skills add https://github.com/DorianGallo/hack-skills-local --skill sandbox-escape-techniques
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sandbox-escape-techniques
Source: https://github.com/DorianGallo/hack-skills-local/tree/main/skills/sandbox-escape-techniques
Command: npx skills add https://github.com/DorianGallo/hack-skills-local --skill sandbox-escape-techniques

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

This Skill helps you break out of constrained execution environments such as Python sandboxes, seccomp filters, chroot jails, containers, and browser sandboxes to regain unrestricted code execution or filesystem access.

Core Features & Use Cases

  • Sandbox type identification and routing: Quickly determine which isolation mechanism you are facing (pyjail, seccomp-bpf, chroot, namespace isolation, container, browser renderer) and jump to the right escape path.
  • Battle-tested bypass playbooks: Use dedicated methodologies for Python pyjail (builtins recovery, keyword/AST bypasses, RestrictedPython escapes), seccomp bypasses (architecture confusion, ORW chaining, ptrace/io_uring strategies), and chroot/container/browser escape decision logic.
  • Engagement-ready decision trees: Follow structured checks (what’s allowed/blocked, version constraints, and syscall or module availability) to converge on an actionable exploit approach.

Quick Start

Ask the AI to provide the sandbox type identification and the fastest escape decision tree for a Python pyjail environment with exec/eval enabled but import and underscore access filtered.

Frequently Asked Questions about sandbox-escape-techniques

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I escape a Python pyjail environment with import and underscore access filtered?

Bypassing seccomp filters involves exploiting architecture confusion, ORW (open-read-write) chaining, and ptrace or io_uring syscall strategies. This Skill helps you systematically analyze allowed and blocked syscalls to construct an actionable bypass workflow that circumvents kernel-level execution restrictions.

What is the best way to identify and break out of restricted container or chroot isolation?

The best way to escape chroot and container isolation is by targeting namespace escape routes and routing decisions. This Skill provides engagement-ready decision logic to check syscall and module availability, allowing you to systematically converge on an actionable exploit approach for filesystem access recovery.

Does this sandbox escape methodology work for browser renderer sandbox contexts?

Yes, this sandbox escape methodology applies to browser renderer contexts. It includes dedicated escape decision logic for browser sandboxes, allowing you to quickly determine the isolation mechanism you are facing and jump to the appropriate bypass path for your restricted execution environment.

Can I use these escape techniques for authorized security testing and CTF pwn challenges?

Yes, you can use these escape techniques for CTF pwn challenges and authorized security testing. The Skill provides battle-tested bypass playbooks designed for incident-style analysis where execution or file access is restricted by runtime or kernel policies in constrained environments.