pyperanger / dockerevil

WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

dockerevil

A simple repository to store my security flaws in the docker technology

2016 - 2017

• Docker API Privilege Escalation(LPE/RPE)
  • Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile
• Docker SUDO Privilege Escalation (PoC)
• Nmap Scripts

2019

• CodeStudent1995 Based Exploit
• OpenShift Privilege Escalation(oc)

---

Other awesome security flaws found in the docker:

• How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass and Persistence in The Hypervisor via Shadow Containers

• CVE-2016-9962

• CVE-2017-14992

• CVE-2019-5736