This repository has been archived by the owner on Jan 19, 2024. It is now read-only.
Releases: Ullaakut/Gorsair
Releases · Ullaakut/Gorsair
Disgo update
1.1.0: Adds exploit through docker socket
This release adds the possibility for gorsair to use the docker socket to gather more information about the daemon, and lets the user run commands on the containers within the exposed docker daemon.
1.0.0
Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers.
Exposing the docker API on the internet is a tremendous risk, as it can let malicious agents get information on all of the other containers, images and system, as well as potentially getting privileged access to the whole system if the image uses the root
user.