An Attacker Looks at Docker Approaching Multi Container Applications

Architecture and Background

Containerization, such as that provided by Docker, is becoming very popular among developers of large-scale applications.

Vulnerability Analysis

The good news: this is likely to make your life easier as an attacker. While exploitation and manipulation of traditional monolithic applications might require specialized experience and training in the target languages and execution environment, applications made up of services distributed among multiple containers can be effectively explored and exploited "from within" using many of the system- and network-level techniques that attackers, such as penetration testers, already know.

Exploitation and Demonstrations

The goal of this talk is to provide a hacker experienced in exploitation and post-exploitation of networks and systems with an exposure to containerization and the implications it has on offensive operations.

Remediation and Defensive Strategies

Docker is used as a concrete example for the case study. A hacker can expect to leave this presentation with a practical exposure to multi-container application post-exploitation.