🚀 Submit a Challenge — SecDim AppSec Village CTF at DEF CON 34 and Win a ROG Xbox Ally

Sign InContact sales
Sign InContact sales

SUID and SSTI

1hBeginnerDocker

SUID binary in a container can allow privilege escalation to root in a fully confined container. Let's see in practice why this happens and how to prevent against it.

Begin course

Topics

  1. Introduction

    Lesson15m

    Let's discuss the concept of `setuid` (SUID) and `setgid` (SGID) in Unix-like filesystems, and their usage, the associated risks and how Docker manages these capabilities to understand their security implications

  2. No new privileges

    Lab40m

    Let’s head to the lab to discover, debug, and fix this vulnerability within an actual application.

  3. Lessons learnt

    Lesson5m

    Containers, protected by kernel features like cgroup and tools like AppArmor, do not offer the same protection as virtual machines. A compromised process in a container can be devastating, and since Docker engine and images often lack secure default settings, it is essential to take time to harden them.