stealthcopter / deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)
Apache License 2.0
1.18k stars 103 forks source link

SYS_MODULE auto exploit #26

Closed naomshi closed 3 years ago

naomshi commented 3 years ago

Exploits the cap_sys_module privilege to create a malicious kernel module, then mounts it to the host to spawn a reverse shell.