docker
docker group or exposed socket → root by mounting the host disk.
The container client. It matters as an escalation vector: if the user is in the docker group or the socket is exposed, they can mount the host disk into a container and read/write as root.
Family Privilege escalation
Flags run -v /:/mnt chroot
Concepts Docker group abuse, Pivoting into Docker containers
Cheatsheet Files, groups & containers
Installation
sudo apt install -y docker.ioUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- BastardHackTheBox
- Infovore 1VulnHub
- LaboratoryHackTheBox
- LegacyHackTheBox
- PeppoProving Grounds Practice
- ShoppyHackTheBox