{"enrichment":{"faq":[{"a":"sandbox-escape-techniques covers multiple Python pyjail breakout methods. Common approaches include recovering `__builtins__` through object introspection, using the subclass walk technique to access restricted modules, exploiting pickle deserialization vulnerabilities, and leveraging exception handlers to execute arbitrary code. The playbook provides decision trees to identify which sandbox variant you're facing and code patterns tailored to each restriction level.","q":"How to escape Python sandbox pyjail environments?"},{"a":"sandbox-escape-techniques includes seccomp evasion strategies such as architecture confusion attacks that exploit mismatches between syscall tables on multi-architecture systems, indirect syscall invocation through legitimate library functions, and timing-based side channels. The resource maps specific seccomp policies to bypass vectors and provides exploit code patterns for common filter configurations.","q":"What seccomp filter bypass techniques does this cover?"},{"a":"sandbox-escape-techniques documents chroot escape methods including double-escape techniques that chain multiple privilege escalation steps, file descriptor manipulation to access parent directories, and kernel exploit vectors when running with sufficient capabilities. The playbook distinguishes between scenarios with and without root access, providing targeted breakout sequences for each.","q":"How can I break out of a chroot jail?"},{"a":"sandbox-escape-techniques addresses Docker and container escape vectors including privilege escalation through misconfigured capabilities, kernel exploit chains targeting namespace isolation, ptrace-based breakouts, and IPC vulnerability exploitation. The resource covers both direct container-to-host escapes and multi-stage exploitation chains commonly seen in CTF scenarios.","q":"What container escape exploit methods are included?"},{"a":"Yes, sandbox-escape-techniques includes browser sandbox circumvention techniques for Chrome and Firefox, covering Mojo IPC vulnerabilities, renderer process escape vectors, and sandbox policy misconfigurations. The playbook explains how browser sandboxes isolate processes and documents known vulnerability patterns and exploitation chains.","q":"Does sandbox-escape-techniques cover browser sandbox bypasses?"},{"a":"sandbox-escape-techniques covers Lua environment bypasses including FFI (Foreign Function Interface) sandbox breakouts that allow direct C library access, metatable manipulation to override restricted functions, and environment table poisoning. The resource includes code patterns for exploiting common Lua sandbox implementations used in CTF challenges.","q":"What Lua sandbox breakout methods are documented?"}],"shadow_tags":["code-execution-bypass","isolation-breakout","privilege-escalation-vector","runtime-restriction-evasion","exploit-methodology","ipc-vulnerability","syscall-filtering-bypass","filesystem-access-escape"],"summary_rewrite":"A comprehensive playbook for escaping multiple sandbox types encountered in CTF competitions and security research. Covers Python pyjail breakouts, Lua environment bypasses, seccomp filter evasion, chroot jailbreaks, container escape vectors, browser sandbox circumvention, and namespace isolation techniques. Includes decision trees and code patterns for each sandbox variant."},"files":[{"bytes":9431,"path":"skills/sandbox-escape-techniques/SKILL.md","sha256":"ea0ddc8359cfbac302ae5df3dc4c49066e787783bce3a111326ef637abf08119","url":"https://skillfed.io/files/yaklang/hack-skills/sandbox-escape-techniques/dc0497b2/SKILL.md"}],"id":"yaklang/hack-skills/sandbox-escape-techniques","links":{"html":"https://skillfed.io/yaklang/hack-skills/sandbox-escape-techniques","md":"https://skillfed.io/yaklang/hack-skills/sandbox-escape-techniques.md","repo":"https://github.com/yaklang/hack-skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":196,"language":"CSS","last_updated":"2026-06-16","license":"MIT","name":"sandbox-escape-techniques","publisher":"yaklang","stars":1480},"relations":{"similar":[{"id":"blacklanternsecurity/red-run/linux-kernel-exploits"},{"id":"yaklang/hack-skills/container-escape-techniques"},{"id":"mohitmishra786/low-level-dev-skills/containers-internals"},{"id":"yaklang/hack-skills/linux-security-bypass"},{"id":"ljagiello/ctf-skills/ctf-misc"},{"id":"martinholovsky/claude-skills-generator/sandboxing"},{"id":"blacklanternsecurity/red-run/container-escapes"},{"id":"hypnguyen1209/offensive-claude/privesc-linux"},{"id":"yaklang/hack-skills/linux-privilege-escalation"},{"id":"blacklanternsecurity/red-run/linux-discovery"}]},"slug":{"owner":"yaklang","repo":"hack-skills","skill":"sandbox-escape-techniques"},"version":"dc0497b2"}