Pentesting with Docker

Presented at BSidesLV 2015, Aug. 4, 2015, 2 p.m. (55 minutes).

Docker allows us to run processes in "isolated" containers. Logically, we can think of containers synonymously to VM's, but they're very different. Docker allows us to create reproducible and sharable images, which can then run anywhere. No more dependencies, no more clutter. Finally your host OS can stay clean. This talk will provide an overview of Docker, how to build and run your own images, how to share data and network services across containers and with your host, and how I use it to run all my tools (Including BurpSuite). Lots of demos, very few slides.

Presenters:

• Tom Steele
  Tom Steele is a principal security consultant at Optiv Security with more than 5 years of penetration testing experience. He writes a lot of code and contributes to many open source projects.

Links:

• https://bsideslv2015.sched.com/event/3udW/pentesting-with-docker
• https://infocon.org/cons/Security BSides/BSides Las Vegas/BSides Las Vegas 2015/Pentesting-with-Docker-Tom-Steele.mp4
• https://www.youtube.com/watch?v=IPcueotnugo

Similar Presentations:

• BSidesSF 2017 / How Secure are your Docker Images?
• AppSec USA 2016 / Breaking and Fixing your ‘Docker’ ized environments
• Black Hat USA 2017 / Well, that Escalated Quickly! How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass and Persistence in the Hypervisor via Shadow Containers