Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

利用lxcfs逃逸思路在cgroup进行逃逸时未复现成功 #4

Open
etn0tw opened this issue May 6, 2023 · 1 comment
Open

利用lxcfs逃逸思路在cgroup进行逃逸时未复现成功 #4

etn0tw opened this issue May 6, 2023 · 1 comment

Comments

@etn0tw
Copy link

etn0tw commented May 6, 2023

在5.3. 创建 cgroup 进行容器逃逸中提到了的思路为“借助上面 lxcfs 的思路，复用到 sys_admin 或特权容器的场景上读写母机上的文件”
在宿主机 kali2020（Linux localhost.localdomain 5.7.0-kali1-amd64 #1 SMP Debian 5.7.6-1kali2 (2020-07-01) x86_64 GNU/Linux）
docker version: 20.10.11+dfsg1
镜像为centos8.4.2105
中复现该操作
image
image
发现No such device or address while trying to open www
请问是我环境问题，还是我操作理解有问题？
@neargle
Copy link
Owner

neargle commented May 6, 2023

试试我另外一个项目 https://github.com/cdk-team/CDK
用这个exp
https://github.com/cdk-team/CDK/wiki/Exploit:-rewrite-cgroup-devices

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@neargle @etn0tw