Prisoner Number Six

Explore Docker container escape techniques in this 52-minute BSidesLV conference talk. Dive into a live demonstration of breaking out of containerized environments, learning about reconnaissance, container capabilities, and advanced command-line techniques. Discover methods for adding new users, mounting applications, and accessing host file systems. Gain insights into system root access, data definition, and BagFS. Follow along as speakers Nimrod Stoler and Lavi Lazarovitz guide you through the intricacies of container security, using the analogy of "Prisoner Number Six" to illustrate the escape process.

Introduction
Agenda
Opening Scene
Who are we
Prisoner Number Six
Docker Playground
Live Escape
Open Containers
Reconnaissance
Container Capabilities
Add New User
Mount Application
Host File System
Pro Command Line
TTY Echo
System Root
Data Definition
BagFS
Recap