Docker
You're viewing a free preview. Sign in free to read every script.
Why this exists Most container security incidents do not need a clever exploit. They need a container that was already running with too much power: started with privileged for a debugging session that nobody undid,…
Docker Host Audit: Find Privileged Containers, Docker Socket Mounts, Exposed Data Ports and Root Users
A read-only script that inspects every running container and reports the settings that give a host away (privileged mode, the Docker socket, host PID and network, dangerous capabilities, databases published on all interfaces, root users, missing limits), tested on a set of deliberately risky containers and one clean one.
Sign in free to read this script, along with the rest of the library.
Sign in free