sandbox-escape-techniques

Python sandbox escape involves recovering builtins through object introspection, keyword bypass, AST manipulation, and pickle deserialization to achieve unrestricted code execution. These CTF pyjail techniques leverage class inheritance chains to access dangerous functions.

Seccomp bypass techniques include architecture confusion, io_uring bypass, ptrace-based bypass, and allowed syscall chaining. These methods circumvent restrictions by confusing the seccomp architecture or chaining permitted syscalls to execute blocked operations.

Chroot escape via file descriptors exploits open fd leaks to the real root directory. Additional methods include double chroot operations, TIOCSTI ioctl injection, /proc access manipulation, and ptrace techniques to regain unrestricted filesystem access.

Namespace escape techniques include user namespace escalation, PID namespace escape, and mount namespace tricks to break Docker and container isolation. These methods exploit namespace misconfigurations to achieve unrestricted code execution outside the container boundary.

Browser sandbox escape vectors include Mojo IPC bugs, shared memory corruption, GPU process bugs, kernel exploits, and signal handling vulnerabilities. These techniques target the browser sandbox architecture to bypass isolation and achieve unrestricted code execution.

RBash escape methods leverage utilities like vi/vim, less/more, awk, find, python/perl/ruby, ssh, git, and encoding techniques to break restricted shell limitations. These tools allow command execution or environment manipulation to bypass RBash restrictions.