container-escape

The Linux Foundation·32 min

• LINUX FOUNDATION
• Cloud
• Date: 2025
• Location: Linux Foundation

Nikunj Doshi · PDT Corp.

Outlines container Escape Paths Nobody Monitors: Abusing Linux Debug Interfaces and evaluates key implications for security practitioners.

Hack In The Box Security Conference·43 min

• HITB
• Cloud
• Date: 2024
• Location: Hitb

Li Qiang

Li Qiang details #HITB2021SIN D2T2 - Container Escape In 2021.

OWASP Global AppSec San Francisco·45 min

• OWASP
• AppSec
• Date: 2024
• Location: Owasp

Amit Schendel

Reviews the Container Escape Room: An Exploration of Container Escapes and evaluates key implications for security practitioners.

RSA Conference (RSAC)·31 min

• RSAC
• Cloud
• Date: 2023
• Location: Rsa

Presents container Escape: All You Need Is Cap (Capabilities) and evaluates key implications for security practitioners.

Black Hat USA 2022·36 min

• Black Hat
• Cloud
• Date: 2022
• Location: Black Hat

Provides kubernetes Privilege Escalation: Container Escape == Cluster Admin and evaluates key implications for security practitioners.

Main Stage·44 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Billy Jheng · Muhammad Ramdhan

Billy Jheng and Muhammad Ramdhan demonstrate multiple novel container escape vectors in Google Kubernetes Engine (GKE) to achieve host node takeover.

Main Stage·32 min

• DEF CON
• AppSec
• Date: Aug 2022
• Location: Las Vegas

Samuel Erb · Justin Gardner

Samuel Erb and Justin Gardner share the story of finding and exploiting a complex RCE exploit chain against KASM Workspaces streaming software.

Main Stage·39 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Eran Segal

Eran Segal investigates Windows container isolation (Process Isolation & Hyper-V), demonstrating novel container escape techniques via Silo IPC mechanisms.

Main Stage·43 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Aviv Sasson

Aviv Sasson presents the complete technical breakdown of FabricEscape (CVE-2022-30137), breaking out of Linux containers to seize full Azure Service Fabric cluster control.

Main Stage·36 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Aviv Sasson

Aviv Sasson details discovering FabricEscape, a severe vulnerability in Microsoft Service Fabric allowing unprivileged containers to seize full cluster admin rights.

Cloud Village·16 min

• DEF CON
• Cloud
• Date: Aug 2021
• Location: Las Vegas

Yuval Avrahami

Palo Alto Networks researcher Yuval Avrahami presents WhoC, a container image tool that extracts the underlying container runtime in public CaaS clouds.

Cloud Village·35 min

• DEF CON
• Malware
• Date: Aug 2021
• Location: Las Vegas

Daniel Prizmant

Daniel Prizmant demonstrates fundamental architectural security flaws in Windows Server Process-Isolated Containers, executing root container escapes.

Main Stage·42 min

• DEF CON
• Cloud
• Date: Aug 2021
• Location: Las Vegas

Ian Coldwater · Chad Rikansrud

Ian Coldwater and Chad Rikansrud unite container and mainframe hacking to achieve the world's first container escape on an IBM LinuxONE mainframe.