A Compendium of Container Escapes
summary
Covers concrete escape paths and working demos: shows how runc race and an exposed overlay upperdir regex let a container write host files; demonstrates exposing the Docker socket and running privileged containers to schedule host mounts; uses writable callbacks like cgroup release_agent and core_pattern to echo a reverse‑shell payload and get root on the host; reproduces Dirty COW and a kernel exploit to overwrite creds and steal mount/user namespaces — all demos execute and yield host shells.
AI-written summary · about
chapters (6)
- 0:00Introduction to container escapes
- 2:58Container basics and security
- 11:08Container engine vulnerabilities
- 16:11Insecure deployment practices
- 25:18Kernel exploitation for escapes
- 34:06Advanced evasion and summary
related talks
45mThe Container Escape Room: An Exploration of Container Escapes
41mEscaping Virtualized Containers
31mContainer Escape: All You Need Is Cap (Capabilities)
35mContainers Attack and Defense
39mInsecure Containers? Continuous Defense Against Open Source Exploits
52mA Wander Through the World of Container Security
32mSecure containers - Michael Wager and Michael Helwig
38mA Treasure Map of Hacking (and Defending) Kubernetes