Lightlines
By yaklang

container-escape-techniques

yaklang3.2k installs

Get host access from a misconfigured container.

What it does

Guides container breakout attempts to obtain access to the host system.

When to use it

Use when operating inside a Docker container, LXC, or Kubernetes pod and seeking access to the host.

How to use it

Give it a container escape request; it checks the container's conditions and follows a matching path to attempt host access.

Uses

Good to know

  • cannot be undone: $d/release_agent

Latest review

What you need · 1

The service-account escape path reads the mounted token file and uses the token as bearer authentication for Kubernetes API requests.


Access · 8

This skill

$d/release_agent

Write

Overwrites the cgroup release handler (irreversible)

Kubernetes

Write

Creates a privileged Kubernetes pod

escape-pod

Execute

Starts a host-access Kubernetes pod