Skip to content
This repository has been archived by the owner on Jan 19, 2024. It is now read-only.

Releases: Ullaakut/Gorsair

Disgo update

06 Apr 11:15
Compare
Choose a tag to compare

Update disgo to 0.3.0

1.1.0: Adds exploit through docker socket

10 Feb 19:34
c23cadd
Compare
Choose a tag to compare

This release adds the possibility for gorsair to use the docker socket to gather more information about the daemon, and lets the user run commands on the containers within the exposed docker daemon.

1.0.0

09 Feb 18:08
Compare
Choose a tag to compare

Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers.

Exposing the docker API on the internet is a tremendous risk, as it can let malicious agents get information on all of the other containers, images and system, as well as potentially getting privileged access to the whole system if the image uses the root user.