Exploitation

Docker API exploitation uses access to the Docker daemon to execute code, escape containers, and compromise the underlying host. An unauthenticated Docker API is effectively root access to the host.

Creating a privileged container with the host filesystem mounted gives you direct read/write access to the host's disk. Container escape from a privileged container uses cgroup release agents or device access to break out to the host. Mounting the Docker socket inside a container lets that container control the daemon itself. Remote API access allows creating containers, executing commands in running containers, and extracting data from volumes.