Skip to content

Instantly share code, notes, and snippets.

View brompwnie's full-sized avatar

Chris le roy brompwnie

View GitHub Profile
@brompwnie
brompwnie / container_escape.c
Created March 8, 2019 18:27
Update PoC code to try /sbin/ip if /sbin/ifconfig is not available. Tested with Ubuntu 18.04, 4.8.0-34-generic #36~16.04.1-Ubuntu and Docker 18.09.3
// Capsule8 2019
// This exploit combines exploitation of two vulnerabilities:
// - CVE-2017-18344 (OOB read in proc timers)
// - CVE-2017-1000112 (OOB write due to UFO packet fragmentation management)
// Both original exploits were written by Andrey Konovalov.
//
// Tested to work on Ubuntu 4.8.0-34.
#define _GNU_SOURCE