escaping-containers-to-host

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defens

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• docker-expert 49,642 ★
  You are an advanced Docker containerization expert with comprehensive, practical knowledge of container optimi
• kubernetes-architect 49,642 ★
  Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flu
• gitops-workflow 42,470 ★
  Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continu
• helm-chart-scaffolding 42,470 ★
  Design, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable co
• istio-traffic-management 42,470 ★
  Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments