vuln_apps

vulnapps A fleet of intentionally-vulnerable apps to point security tooling at crossfyre, Burp, ZAP, nuclei, and so on. This folder holds no app source , just skeleton definitions and a small manager. Each app runs as its own isolated container stack, so nothing clashes. Everything here is...

Who Contains the Containers?

Posted by James Forshaw, Project Zero This is a short blog post about a research project I conducted on Windows Server Containers that resulted in four privilege escalations which Microsoft fixed in March 2021. In the post, I describe what led to this research, my research process, and insights...

The vulnerability of the runc command, a tool for starting isolated containers, is related to errors in processing file descriptors. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the runc command, used to execute isolated containers, is related to errors in processing file descriptors. Exploiting this vulnerability allows an attacker to execute arbitrary code...