Build to Hack, Hack to Build

Explore container exploitation and security in this 25-minute conference talk from Security BSides London. Learn about the development of BOtB, a container exploitation tool designed to identify and autopwn common vulnerabilities in Docker and LXC. Discover how BOtB can be integrated into modern SDLC environments using CI/CD technologies to detect, exploit, and remediate container vulnerabilities before production releases. Gain insights into the technical details of container vulnerabilities exploitable by BOtB, and understand how both pentesters and engineers can leverage this tool to enhance container security. Delve into topics such as BreakAfterBox, Dakka, Hydroponic Sock, CI environments, environment variables, OS environments, metadata services, and binary hijacking.