A Compendium of Container Escapes

The goal of this talk is to broaden the awareness of the how and why container escapes work, starting from a brief intro to what makes a process a container, and then spanning the gamut of escape techniques, covering exposed orchestrators, access to the Docker socket, exposed mount points, /proc, all the way down to overwriting/exploiting the kernel structures to leave the confines of the container.
By Brandon Edwards and Nick Freeman
Full Abstract & Presentation Materials: www.blackhat.c...