Hack Your Own Code
summary
Demonstrates a live exploit of a vulnerable Flask/Jinja2 template: fuzzing with gobuster and seclists finds a search endpoint, a crafted SSTI payload enumerates Python objects, discovers subprocess.popen at index 342 and executes ls, then runs an ENV dump to harvest environment secrets. Shows how a root container with privileged flag allows mounting host files to escape Docker and reach a Kubernetes node. Recommends fuzz endpoints, stop storing secrets in env vars, run containers non-root and use cloud secret managers.
AI-written summary · about
chapters (9)
- 0:00Introduction and motivation
- 2:30Learning hacking from blog posts
- 7:05Four stages of hacking explained
- 11:40Enumeration and fuzzing demo
- 13:50Server-side template injection
- 15:15Harvesting credentials
- 16:16Privilege escalation in containers
- 18:26Security takeaways and fixes
- 21:58Q&A session starts
related talks
39mHow to think like a hacker
39mInsecure Containers? Continuous Defense Against Open Source Exploits
57mWhat vulnerabilities? Live hacking of containers and orchestrators
40mLive hacking: Breaking into your web app
41mLive Hacking: Breaking into Your Web App
50mHacking Exposed - Hacking the Sec into DevOps
38mA Treasure Map of Hacking (and Defending) Kubernetes
45mThe Container Escape Room: An Exploration of Container Escapes