Container Security Masterclass: Web App Exploitation & Breakouts

So we are going to cover offensive container security.

So

I have an open source workshop.

So from that, I'll be showing like an entire like, as you said, web application exploited and then attacker tries to break out of the container.

So

we try to understand with the Langflow CV, it's an AI framework.

So like I'll try to show it's more from the container point but wherever this application is deployed and no attackers are actively exploiting this and if someone is running in cuban it is as a micro service then initially they have a container and how attacker can try to break from breakout via no exploiting a web application like in simple language what happens when attacker gets an rc in a container and from there how like attacker no traverse across the infrastructure and second it's more like no our developers or like uh people or like management will ask like what happens because my container is already inside

what's

the worst can happen like it is secure inside your cloud or maybe on-prem then what can go wrong so we'll understand that perspective that why this uh layer two or level two in the container from container

sorry to interrupt here as you said a lot of technical terms like you know level one level two what is container i want to see i am not a person who came from a programming background and if possible before we jump into the core part can we deep dive can we start with some basics what is container and why there's a need for containers and then we discussed about the the architecture which you said then layer two layers so then we can able to build the context better

yeah sure so i'll i'll simply first explain so this is the common uh problem right now whenever i go and work like engineers especially developers or managers like no non-technical folks they'll ask that because we have a cloud present and then there is a container inside that cloud then then how attacker can hack it as simple as that yeah so we'll try to understand that scenario and then like i'll explain you more in the technical context so first we'll understand this container and docker like these are common terms used and then i'll show you the architecture and then why this architecture or why this design when uh created in an insecure way creates a common breakout patterns which are detected by your cspm or by automated scripts or like whichever way people want to

sure sure so we can start with the first container foundation which can give a good insight So Devianshu, I want to understand one thing, you know, before I jump into the container security, I don't have any idea about container.

So you got a student who has zero understanding about container.

So please give me the direction.

Yeah, sure.

so like

i have this uh open documentation which i have created for container offensive container security this is the website container security dot pc cloud security dot com so i will update

this in a youtube box also youtube description also

yeah so like this is the landing page which most of you guys see you can go through it it covers other concepts which like you can do later it won't be part of this master class because i just want to keep it short and are to the point so you you i i won't be you know guiding you the setup they are all pre-written with the copy paste instructions exactly like what the person needs to do whoever is following the documentation So I'll jump onto the foundation.

We'll directly cover the foundation of containers, images, and Docker file.

We'll understand why this security is even required in the Docker in the first place.

And then we'll understand the containers and virtual machine difference followed by images and like what all these terms are and how you run it.

Then we'll directly from here, we'll directly jump to our attack lab.

which is this docker socket breakout via cv20253248 this is a lan flow cv which came last year and what is lan flow no idea

so i'm sure you're going to cover that basics also