Skip to content

Latest commit

 

History

History
30 lines (14 loc) · 990 Bytes

README.md

File metadata and controls

30 lines (14 loc) · 990 Bytes
Raw

Abusing Docker Configuration: Privesc Script

Read full article: https://flast101.github.io/docker-privesc

docs/docker.png

Requirements:

  • Access to a shell on the target with a user that can run Docker.
  • The target should have either an internet connection or an image installed in Docker. Use docker images to check and change the "alpine" image accordingly. If there is no image go to https://hub.docker.com to get one (tar.gz file with its Dockerfile) and upload it on the target in your working directory.

Usage example:

privesc.png

Mitigation

By default, the process is run as root in the container:

nomitig.png

Applying the mitigation, we can get rid of this problem. The user "dockremap" is now running the process:

mitig.png

Be Curious, Learning is Life ! 😃