Link-Write Attack: A sweet combination

I’ve recently been working on some exciting development projects, including a deep dive into archive extraction. During this work, I discovered some fascinating behaviours that I’m thrilled to share with you in the following sections. ...

August 11, 2024 · Jan Harrie

Pentesting Cloud Sandboxes in the wild

Matthias and I talked about cloud sandboxes on virtual BSides Munich 2020. This blogpost summarizes the content of the talk. ...

August 23, 2020 · Jan Harrie

Container Breakouts – Part 3: Docker Socket

This post is part of a series and shows container breakout techniques that can be performed if a container is started with a mounted Docker socket inside the container. ...

July 30, 2020 · Jan Harrie

Container Breakouts – Part 2: Privileged Container

This post is part of a series and shows container breakout techniques that can be performed if a container is started privileged. ...

July 21, 2020 · Jan Harrie

Container Breakouts – Part 1: Access to root directory of the Host

This post is part of a series and shows container breakout techniques that can be performed if a container is started with access to the host root directory. ...

July 15, 2020 · Jan Harrie