windows Process Injection using QueueUserAPC Technique in Windows You will learn the fundamentals of user mode asynchronous procedure calls in this post, as well as how to use them to inject shellcode into a remote process thread to obtain a reverse shell.
docker Why Pivot Root is Used for Containers In this post, you will learn about the differences between only chroot and chroot after pivot_root in detail. You will realise the reason why it is used in containerization.
docker Prevent Privilege Escalation from Container Breakout via UserNS Remapping Hello World! In my previous posts, I have discussed a lot on how does a user with certain capabilities can escape the docker container and execute commands on the root of the host. The naive approach to fix this issue could be the combination of the following * Disable capabilities like
docker Basics of Seccomp for Docker Seccomp is a kernel feature that allows you to filter syscalls for a specified process. In this article, you'll learn how to use strict and eBPF modes with your existing Docker configuration.
docker Docker Resource Management in Detail In this post, you will learn about control groups (cgroups) and namespaces required for running containers. Finally, you will create your container without the use of Docker.
docker How does Docker run Containers Under the Hood In this post, I'll show you how docker works behind the scenes and how to spawn containers using containerd and runc as the main runtime. What's more, how does it start the program from ENTRYPOINT.
docker Observe Malicious Actions being Detected using Falco In this post, you'll learn how to get started using the Falco tool to examine logs of harmful activity in containers.
docker Identify the issues in Docker setup using Dockscan This post will lead you through the process of identifying and assessing vulnerabilities in the Docker service installation.
docker Identify known Vulnerabilities in Docker Image using Clair In this post, you'll learn about the Clair tool, which is used to scan Docker images for vulnerabilities and report them.
docker Secure the Docker Registry with Password and TLS Certificates Learn how to use the official image to create a private docker registry, then protect it with TLS certificates and HTTP Basic authentication.
docker Identify and Fix Misconfigurations in Dockerfile via Linters Get a quick walkthrough of the dockerfile linter tool used to discover and resolve violations of expert-designed best-practice guidelines.
docker Breakout from the Seccomp Unconfined Container In this post, you'll discover how to exploit the CAP SYS MODULE capability in a privileged exec session to break out of a seccomp unconfined container that was launched with no extra rights or capabilities.
docker Bypass the Docker Firewall by Abusing REST API Learn about the misconfigurations in the Docker API firewall and how to take advantage of them to break into a container.
docker Exploiting Security Checks on Bind Mount In this post, you'll learn how to acquire privileged access on the host computer by abusing the bind mount security limitation in the Docker API firewall.
docker Corrupting the Source Docker Image In this post, we'll look at a few circumstances in which backdooring images could allow us to access a remote container.
windows Process Injection using CreateRemoteThread API CreateRemoteThread is the oldest method of process injection, and it is easily detectable. However, this establishes the foundations for process injection and code execution. This blog post will provide you with a thorough and practical explanation of how it works.
docker Interacting with Protected Docker Registry In this post, you will learn how to interact with the HTTP Basic Auth protected docker registry and cracking password with the hydra tool.
docker Hunting Secrets from Containers by Analysing Docker Images Docker images are used to create containers and contain some secrets that can be extremely useful when exploiting applications. In this post, you will learn how to search for such information in Docker images or Dockerfiles in order to gain unauthorised access.
docker Exploiting Insecure Docker Registry Assume you're in a situation where you can't use Docker. How would you use the remote registry to get image FS layers? This guide will walk you through using simply the curl command to interface with the Docker registry.
docker Hunting for Malicious Binaries and Backdoors in the Running Containers An attacker might exploit one of the container's service and install malicious apps or a backdoor to get access to your container later. In this post, you'll learn how to use the "docker diff" plugin to do forensics and incident response on a running docker container.
docker Analyzing Docker Image for Retrieving Secrets In this tour, you'll learn how to start a container from a checkpoint to restore its process and memory state, as well as how to utilise container-diff tool to analyze the exported docker images.
docker Creating your Own Base Image for Docker Have you ever wondered what it's like to create a docker base image that users can import and build on? This tutorial will show you how to make your own Docker base images from scratch in two different approaches.
docker Exploiting Micro Services Running in the Docker Containers Micro-services are the rage among young engineers these days, and everyone is adopting this method. Discover how to take advantage of these services to obtain access to the containers.
docker Getting your Hands Dirty with Multi Container Architecture Setup In the projects, many containers are employed to segregate the logic for ease of development and scaling. It also helps to reduce the impact on other components if one is compromised. In less than 10 minutes, you'll learn how to build such setup using docker-compose.
javascript security Authentication Best Practices in the Web Applications Javascript is used everywhere on the web and has gained a lot of interest among hackers. Get a detailed guide on best practices for making your authentication process more robust and secure than before.
