Abusing Docker Configuration - Privilege Escalation

Sorry guys, I realized it is a spoiler, but I didn’t feel that way when using the screenshots because when you arrive at this point, you already did the hard part. I will blur the machine name this evening in the article.
About how the box initial state:

  • There is no container running (docker ps returns no container).
  • An Ubuntu image has already been pulled and docker image returns a result with 1 image.
  • A harder way would be to have to copy an image and a Dockerfile to exploit them (which should usually be easy with an internet connection as you can pull images from Docker Hub)