Docker: Part 5 — Real-World Attack Scenarios By now, you’ve learned how Docker works, how to identify it, and how to exploit its weaknesses. But theory means little without real-world context. In this post, we’ll walk through real attack scenarios where Docker becomes your foothold — or your pathway to root. These are drawn from […]
Docker Attack Scenarios Read More »
Docker: Part 4 — Escaping Docker Containers Most of the time, Docker containers are designed to be isolated from the host system. But isolation isn’t security — and containers aren’t real sandboxes. Under certain conditions, it’s possible to break out of a container and compromise the host. This post covers: What Makes Escapes Possible? Containers
Escaping Docker Containers Read More »
Docker: Part 3 — Privilege Escalation via Docker Once you confirm that Docker is running — or that you’re in the docker group — the path to root is often just a few commands away. In this post, you’ll learn: Why Docker Group Access is Dangerous The Docker daemon (dockerd) runs as root. If you
Docker: Part 2 — Recon & Enumeration Now that you understand what Docker is and why it’s widely used, it’s time to learn how to detect Docker in an environment and begin enumerating it for privilege escalation opportunities. This post covers: Step 1: Are You Inside a Docker Container? When you land a shell, you
Docker Recon & Enum Read More »
Docker for Pentesters: Part 1 As a penetration tester, you’re going to run into Docker. A lot. Whether it’s powering the web application you’re testing, hiding secrets in a containerized CI/CD pipeline, or quietly offering root access through a misconfigured socket — Docker is everywhere in modern infrastructure. So before we exploit it, let’s understand
