Deepdive Containers - Kernel Sources and nsenter

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=sHp0Q3rvamk


Duration: 11:46
41,035 views
1,557

Let's play around with Docker a bit more. We learn about the nsenter command, how kernel code execution allows escaping from docker and we look at Linux Kernel source code of getpid().

Daniel Mitre's blog: https://medium.com/@flag_seeker/linux-container-from-scratch-339c3ba0411d
bocker: https://github.com/p8952/bocker/
Elixir: https://elixir.bootlin.com/linux/latest/source/kernel/sys.c#L891
Denis Andzakovic: https://pulsesecurity.co.nz/articles/docker-rootkits

-=[ ❀ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.



Other Videos By LiveOverflow


2020-05-02Researching MissingNo Glitch in Pokemon
2020-04-24DLL Injection to Create a Fly Hack - Pwn Adventure 3
2020-04-15Dissecting Pokemon Red Savegame
2020-04-06Reverse Engineered old Compression Algorithm for Frogger
2020-04-01Security.txt - My Awesome Invention for Security Researchers
2020-03-25Reverse Engineering Introduction Walkthrough - intro_rev/rev1 CSCG 2020
2020-03-18Mindmapping a Pwnable Challenge - intro_pwn/pwn1 CSCG 2020
2020-03-11$100k Hacking Prize - Security Bugs in Google Cloud Platform
2020-03-04We are Organizing a CTF! - CSCG Announcement
2020-02-29Solving Pwnable CTF Challenge With Docker Workflow
2020-02-26Deepdive Containers - Kernel Sources and nsenter
2020-02-21How Docker Works - Intro to Namespaces
2020-02-14Introduction to Docker for CTFs
2019-12-24The End Of Haxember - See You In 2020!
2019-12-23Hacking My Instagram Account
2019-12-22Fiber Tapping - Monitoring Fiber Optic Connections
2019-12-21Race Condition Trick /proc/self/fd
2019-12-20Traveling to London for Escal8 and Google CTF
2019-12-19Python 2 vs 3 for Binary Exploitation Scripts
2019-12-18File Path Race Condition & How To Prevent It - bin 0x31
2019-12-17Writing a Simple Buffer Overflow Exploit


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
docker
nsenter
docker exec
kernel sources
linux kernel
namespaces
namespace
pid
utc
mount
overlayfs
syscall
getpid
containers
container