• Why you should not run Docker with the “privileged” flag

Privileged Docker容器是使用 –Privileged flag运行的容器。与常规容器不同，这些容器具有对主机的root权限。

当容器需要直接的硬件访问权限来完成它们的任务时，通常使用Privileged容器。然而，有Privileged的Docker容器可以使攻击者接管主机系统。now，看看攻击者是如何逃逸Privileged容器的。

寻找可利用的容器

怎么才能首先知道是否处于一个Privileged的容器中呢?

introduce

OS: Other
Difficulty: Easy
Points: 20
Release: 28 Nov 2020
IP: 10.10.10.218

introduce

OS: Linux
Difficulty: Insane
Points: 50
Release: 19 Sep 2020
IP: 10.10.10.208

User Blood haqpl 00 days, 15 hours, 52 mins, 14 seconds.
Root Blood haqpl 01 days, 00 hours, 25 mins, 20 seconds.

introduce

OS: Linux
Difficulty: Easy
Points: 20
Release: 14 Nov 2020
IP: 10.10.10.216

User Blood wtflink 00 days, 01 hours, 48 mins, 28 seconds.
Root Blood Icebreaker 00 days, 02 hours, 03 mins, 10 seconds.

introduce

OS: Linux
Difficulty: Easy
Points: 20
Release: 07 Nov 2020
IP: 10.10.10.215

User Blood snowscan 00 days, 00 hours, 21 mins, 04 seconds.
Root Blood jkr 00 days, 00 hours, 47 mins, 31 seconds.

introduce

OS: Linux
Difficulty: Medium
Points: 30
Release: 17 Oct 2020
IP: 10.10.10.212

User Blood szymex73 00 days, 00 hours, 41 mins, 20 seconds.
Root Blood szymex73 00 days, 01 hours, 20 mins, 22 seconds.

introduce

OS: Linux
Difficulty: Medium
Points: 30
Release: 24 Oct 2020
IP: 10.10.10.214

User Blood Sp3eD 00 days, 00 hours, 08 mins, 51 seconds.
Root Blood Sp3eD 00 days, 00 hours, 17 mins, 49 seconds.

常规木马免杀处理-查杀情况记录2

杀毒软件及免杀技巧资源汇总Anti-av

• 杀毒软件及免杀技巧资源汇总Anti-av

venom

• venom-github

安装

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

1º - Download framework from github
git clone https://github.com/r00t-3xp10it/venom.git

2º - Set execution permitions
cd venom-main
sudo find ./ -name "*.sh" -exec chmod +x {} \;
sudo find ./ -name "*.py" -exec chmod +x {} \;

3º - Install all dependencies
cd aux && sudo ./setup.sh

4º - Run main tool
sudo ./venom.sh

Update venom instalation (compare local version againts github oficial version)
sudo ./venom.sh -u

introduce

OS: Linux
Difficulty: Medium
Points: 30
Release: 10 Oct 2020
IP: 10.10.10.211

User Blood haqpl 00 days, 01 hours, 43 mins, 28 seconds.
Root Blood Ziemni 00 days, 02 hours, 59 mins, 53 seconds.

introduce

OS: Windows
Difficulty: Hard
Points: 40
Release: 03 Oct 2020
IP: 10.10.10.210

User Blood xct 00 days, 03 hours, 08 mins, 20 seconds.
Root Blood xct 00 days, 07 hours, 06 mins, 12 seconds.