container-escapes
Fail
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes a shell script directly from a GitHub repository (stealthcopter/deepce) using the 'curl | bash' pattern.
- [REMOTE_CODE_EXECUTION]: Pipes the output of Docker API requests (both via local unix sockets and remote HTTP endpoints) directly into the python3 interpreter for processing or execution.
- [COMMAND_EXECUTION]: Contains numerous commands for escaping container constraints, including mounting host filesystems, entering host namespaces using 'nsenter', and manipulating kernel cgroups to execute code on the host system.
- [DATA_EXFILTRATION]: Provides templates and code for establishing reverse shells using bash and kernel modules to exfiltrate data to remote IP addresses.
- [CREDENTIALS_UNSAFE]: Includes specific instructions and automated search patterns to locate and extract sensitive credentials, such as Kubernetes service account tokens, SSH private keys, and cloud provider metadata credentials (AWS, GCP, Azure).
- [EXTERNAL_DOWNLOADS]: Fetches multiple external security tools (such as deepce, CDK, amicontained, and linpeas) from remote repositories during runtime.
Recommendations
- HIGH: Downloads and executes remote code from: http://localhost/containers/json, http://localhost/images/json, https://github.com/stealthcopter/deepce/raw/main/deepce.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata