diff --git a/docs/reference/attacks/CE_NSENTER.md b/docs/reference/attacks/CE_NSENTER.md index 9fbbc03bf..a602febc8 100644 --- a/docs/reference/attacks/CE_NSENTER.md +++ b/docs/reference/attacks/CE_NSENTER.md @@ -84,6 +84,6 @@ Avoid running containers as the `root` user. Enforce running as an unprivileged ## References: + [nsenter(1) - Linux manual page](https://man7.org/linux/man-pages/man1/nsenter.1.html) -+ [Docker Breakout / Privilege Escalation](https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-breakout/docker-breakout-privilege-escalation#privileged-+-hostpid) ++ [Bad Pod #2: Privilege and HostPid](https://bishopfox.com/blog/kubernetes-pod-privilege-escalation#Pod2) + [Debugging containers using nsenter](https://jaanhio.me/blog/nsenter-debug/) diff --git a/docs/reference/attacks/CE_PRIV_MOUNT.md b/docs/reference/attacks/CE_PRIV_MOUNT.md index 63d06cc1e..fc35f3b45 100644 --- a/docs/reference/attacks/CE_PRIV_MOUNT.md +++ b/docs/reference/attacks/CE_PRIV_MOUNT.md @@ -82,5 +82,5 @@ Avoid running containers as the `root` user. Enforce running as an unprivileged ## References: -+ [HackTricks Docker Breakout](https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-security/docker-breakout-privilege-escalation) - ++ [Bad Pods: Kubernetes Pod Privilege Escalation](https://bishopfox.com/blog/kubernetes-pod-privilege-escalation) ++ [7 Ways to Escape a Container](https://www.panoptica.app/research/7-ways-to-escape-a-container) diff --git a/docs/reference/attacks/EXPLOIT_HOST_WRITE.md b/docs/reference/attacks/EXPLOIT_HOST_WRITE.md index 12aaaa1a1..a76aba3ca 100644 --- a/docs/reference/attacks/EXPLOIT_HOST_WRITE.md +++ b/docs/reference/attacks/EXPLOIT_HOST_WRITE.md @@ -70,6 +70,7 @@ Avoid running containers as the `root` user. Enforce running as an unprivileged ## References: -+ [HackTricks Docker Breakout](https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-security/docker-breakout-privilege-escalation) ++ [Bad Pods: Kubernetes Pod Privilege Escalation](https://bishopfox.com/blog/kubernetes-pod-privilege-escalation) ++ [7 Ways to Escape a Container](https://www.panoptica.app/research/7-ways-to-escape-a-container) + [Atomic Red Team T1611](https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1611/T1611.md)