Control Groups | The Offensive Labs

Autoplay
Autocomplete

Previous Lesson Complete and Continue

Hacking and Securing Docker Containers

Course Introduction

Introduction (1:20)

Docker Fundamentals

Introduction (0:35)
What is Docker? (2:03)
Virtual Machines vs Containers (2:10)
Virtual Machine Download
Lab setup (1:19)
Building your first Docker image (3:58)
Running your first Docker container (5:21)
Images vs Containers (2:25)
How Docker Images are stored locally (15:10)
Control Groups (5:28)
Namespaces - Part 1 (5:16)
Namespaces - Part 2 (6:26)

Hacking Docker Containers

Introduction
Docker Attack Surface (2:38)
Exploiting vulnerable images (5:15)
Backdooring Docker Images (7:30)
Privilege Escalation (6:10)
Container breakout- Introduction (0:39)
Introduction to docker.sock (1:39)
Container escape using docker.sock (5:31)
Introduction to --privileged flag (4:12)
Writing to kernel space from a container (5:25)
Writing to kernel space to get a reverse shell (4:19)
Accessing Docker Secrets (4:05)

Automated Assessments

Introduction (0:26)
Scanning Docker Images (3:11)
Auditing the environment using Docker Bench Security (7:11)

Defenses

Introduction (1:06)
Apprarmor profiles (5:21)
Seccomp profiles (4:37)
Capabilities (5:37)
Docker Content Trust (5:18)

Conclusion

Conclusion (0:14)

Teach online with

Control Groups

Complete and Continue