Category Container Escape

blog
4+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Container Escape blog

Filters

  • Kubernetes Pentesting: RBAC, Secrets, PrivEsc and Kubectl
    linux

    Kubernetes Pentesting: RBAC, Secrets, PrivEsc and Kubectl

    Kubernetes pentest: How a stolen token in a Pod leads, via RBAC and nodes/proxies, to privilege escalation and root shell on the node, with kubectl and cheatsheet.

    Discover more Discover more
  • HTB Monitors Walkthrough: Cacti SQLi and Container Escape
    walkthroughs

    HTB Monitors Walkthrough: Cacti SQLi and Container Escape

    Walkthrough of Hack The Box Monitors: SQLi in Cacti (CVE-2020-14295), deserialization in OFBiz (CVE-2020-9496), and container escape via kernel module.

    Discover more Discover more
  • Port 2375 Docker API: Enumeration, RCE, and Hardening
    networking

    Port 2375 Docker API: Enumeration, RCE, and Hardening

    Port 2375 Docker API pentest: Test unauthenticated access, get RCE and root on the host, and apply detection, TLS, firewall, and hardening.

    Discover more Discover more
  • Container Escape: Privilege Escalation Docker and Kubernetes
    linux

    Container Escape: Privilege Escalation Docker and Kubernetes

    Container Escape: Docker sockets, privileged containers, Linux capabilities, Kubernetes, kernel exploits, and IMDS. Privilege escape techniques, detection, and defense.

    Discover more Discover more