GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — GitHub - pyperanger/dockerevil: WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

BranchesTags
Open more actions menu

Latest commit

 

History

42 Commits
42 Commits

Folders and files

NameName
Last commit message
Last commit date
README.md
README.md
 
 
docker-api.md
docker-api.md
 
 
http-docker-rapi.nse
http-docker-rapi.nse
 
 
openshift-priv.json
openshift-priv.json
 
 
privbuildtar.md
privbuildtar.md
 
 
sud0-priv.sh
sud0-priv.sh
 
 
sudo-priv.md
sudo-priv.md
 
 

Repository files navigation

dockerevil

A simple repository to store my security flaws in the docker technology

2016 - 2017

  • Docker API Privilege Escalation(LPE/RPE)
    • Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile
  • Docker SUDO Privilege Escalation (PoC)
  • Nmap Scripts

2019

  • CodeStudent1995 Based Exploit
  • OpenShift Privilege Escalation(oc)

Other awesome security flaws found in the docker:

  • How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass and Persistence in The Hypervisor via Shadow Containers

  • CVE-2016-9962

  • CVE-2017-14992

  • CVE-2019-5736

About

WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

Topics

dockerdocker-apidocker-vulnerabilitieslinux-privilege-escalationopenshiftopenshift-vulnerabilitiesprivilage-escalationsecurity-flaws

Resources

Readme
Activity

Stars

33 stars

Watchers

4 watching

Forks

2 forks
Report repository

Releases

Packages

Contributors

Languages

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.