domains / families / security / container-escape-techniques

container-escape-techniques

separate

Container escape playbook. Use when operating inside a Docker container, LXC, or Kubernetes pod and need to escape to the host via privileged mode, capabilities, Docker socket, cgroup abuse, namespace tricks, or runtime vulnerabilities.

When to use

• privileged container breakout
• capability abuse
• Docker socket exploitation
• cgroup release_agent
• namespace escape
• runtime CVEs
• Kubernetes pod escape
• container detection

When not to use

• linux privilege escalation inside container
• Kubernetes-specific attack paths beyond pod escape
• seccomp/AppArmor bypass

Skill page

Source