Comment on page
Weaponizing Distroless
- Do you work in a cybersecurity company? Do you want to see your company advertised in HackTricks? or do you want to have access to the latest version of the PEASS or download HackTricks in PDF? Check the SUBSCRIPTION PLANS!
A distroless container is a type of container that contains only the necessary dependencies to run a specific application, without any additional software or tools that are not required. These containers are designed to be as lightweight and secure as possible, and they aim to minimize the attack surface by removing any unnecessary components.
Distroless containers are often used in production environments where security and reliability are paramount.
Some examples of distroless containers are:
The goal of weaponize a distroless container is to be able to execute arbitrary binaries and payloads even with the limitations implied by distroless (lack of common binaries in the system) and also protections commonly found in containers such as read-only or no-execute in
/dev/shm.Coming at some point of 2023...
****In this post, it is explained that the binary
openssl is frequently found in these containers, potentially because it's needed by the software that is going to be running inside the container.Abusing the
openssl binary is possible to execute arbitrary stuff.- Do you work in a cybersecurity company? Do you want to see your company advertised in HackTricks? or do you want to have access to the latest version of the PEASS or download HackTricks in PDF? Check the SUBSCRIPTION PLANS!
Last modified 7mo ago