Improve post/linux/gather/checkcontainer

[jvoisin]

Cousin on #18190 but for containers

Verification

List the steps needed to make sure this thing works

• Test Podman detection
• Test Docker detection
• Test LXC detection
• Test WSL detection

[jheysel-r7]

Thanks for the enhancements @jvoisin! I did some testing, everything worked great when testing in a Docker container:

msf6 post(linux/gather/checkcontainer) > set session -1
session => -1
msf6 post(linux/gather/checkcontainer) > run

[+] This appears to be a 'Docker' container
[*] Post module execution completed
msf6 post(linux/gather/checkcontainer) >

I ran into some issues testing some of the other contains and have left some suggestions.

I was wondering if you could please do me a favour and add the container setup instructions from my comments to a # Vulnerable Application section of the documentation file documentation/modules/post/linux/gather/checkcontainer.md?

The containers were created with SSH access enabled so that the auxiliary/scanner/ssh/ssh_login could be used to establish the initial session.

[jheysel-r7]

Testing is as expected 🎉

Docker detection

msf6 post(linux/gather/checkcontainer) > set session -1
session => -1
msf6 post(linux/gather/checkcontainer) > run

[+] This appears to be a 'Docker' container
[*] Post module execution completed
msf6 post(linux/gather/checkcontainer) >

Podman detection

msf6 post(linux/gather/checkcontainer) > set session -1
session => -1
msf6 post(linux/gather/checkcontainer) > run

[+] This appears to be a 'Podman' container
[*] Post module execution completed
msf6 post(linux/gather/checkcontainer) >

LXC detection

msf6 post(linux/gather/checkcontainer) > set session -1
session => -1
msf6 post(linux/gather/checkcontainer) > run

[+] This appears to be a 'LXC' container
[*] Post module execution completed
msf6 post(linux/gather/checkcontainer)

WSL detection

msf6 post(linux/gather/checkcontainer) > set session -1
session => -1
msf6 post(linux/gather/checkcontainer) > run

[+] This appears to be a 'WSL' container
[*] Post module execution completed
msf6 post(linux/gather/checkcontainer)

[jheysel-r7]

Release Notes

This PR adds support for detecting whether a metasploit session is running in a Podman container and improves detection for sessions running in Docker, LXC and WLS containers.