Network & Systems
Container Escapes
Containers are not virtual machines. The kernel is shared, and one misconfiguration is all it takes to go from inside a container to owning the host. Learn how attackers break out.
Intermediate50 min6 lessons1 hands-on
First lesson free. The full module is part of Pro.
You'll be able to
- ✓Identify whether you are inside a Docker container
- ✓Escape a container via a mounted docker.sock
- ✓Exploit the --privileged flag to mount the host disk and chroot out
- ✓Find secrets in environment variables and sensitive host mounts