sandbox-escape-techniques
A comprehensive playbook for escaping multiple sandbox types encountered in CTF competitions and security research. Covers Python pyjail breakouts, Lua environment bypasses, seccomp filter evasion, chroot jailbreaks, container escape vectors, browser sandbox circumvention, and namespace isolation techniques. Includes decision trees and code patterns for each sandbox variant.
Sandbox Escape Techniques teaches methods to break out of Python, Lua, seccomp, chroot, Docker, browser, and namespace sandboxes.
AI-generated summary based on this skill's SKILL.md
Install
yaklang/hack-skills/sandbox-escape-techniques · repository language: CSS
git clone https://github.com/yaklang/hack-skills
cp -r hack-skills/skills/sandbox-escape-techniques ~/.claude/skills/sandbox-escape-techniquesnpx skillfed install yaklang/hack-skills/sandbox-escape-techniquesFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How to escape Python sandbox pyjail environments?
sandbox-escape-techniques covers multiple Python pyjail breakout methods. Common approaches include recovering `__builtins__` through object introspection, using the subclass walk technique to access restricted modules, exploiting pickle deserialization vulnerabilities, and leveraging exception handlers to execute arbitrary code. The playbook provides decision trees to identify which sandbox variant you're facing and code patterns tailored to each restriction level.
What seccomp filter bypass techniques does this cover?
sandbox-escape-techniques includes seccomp evasion strategies such as architecture confusion attacks that exploit mismatches between syscall tables on multi-architecture systems, indirect syscall invocation through legitimate library functions, and timing-based side channels. The resource maps specific seccomp policies to bypass vectors and provides exploit code patterns for common filter configurations.
How can I break out of a chroot jail?
sandbox-escape-techniques documents chroot escape methods including double-escape techniques that chain multiple privilege escalation steps, file descriptor manipulation to access parent directories, and kernel exploit vectors when running with sufficient capabilities. The playbook distinguishes between scenarios with and without root access, providing targeted breakout sequences for each.
What container escape exploit methods are included?
sandbox-escape-techniques addresses Docker and container escape vectors including privilege escalation through misconfigured capabilities, kernel exploit chains targeting namespace isolation, ptrace-based breakouts, and IPC vulnerability exploitation. The resource covers both direct container-to-host escapes and multi-stage exploitation chains commonly seen in CTF scenarios.
Does sandbox-escape-techniques cover browser sandbox bypasses?
Yes, sandbox-escape-techniques includes browser sandbox circumvention techniques for Chrome and Firefox, covering Mojo IPC vulnerabilities, renderer process escape vectors, and sandbox policy misconfigurations. The playbook explains how browser sandboxes isolate processes and documents known vulnerability patterns and exploitation chains.
What Lua sandbox breakout methods are documented?
sandbox-escape-techniques covers Lua environment bypasses including FFI (Foreign Function Interface) sandbox breakouts that allow direct C library access, metatable manipulation to override restricted functions, and environment table poisoning. The resource includes code patterns for exploiting common Lua sandbox implementations used in CTF challenges.
SKILL.md
rendered from the published skill — quoted content, verbatim
SKILL: Sandbox Escape — Expert Attack Playbook
> AI LOAD INSTRUCTION: Expert sandbox escape techniques across Python, Lua, seccomp, chroot, Docker/container, and browser sandbox contexts. Covers CTF pyjail patterns, seccomp architecture confusion, chroot fd leaks, namespace escape, and Mojo IPC abuse. Distilled from ctf-wiki sandbox sections and real-world container escapes. Base models often miss the distinction between sandbox types and apply wrong escape techniques.
0. RELATED ROUTING
- browser-exploitation-v8 — V8 exploitation for renderer RCE before browser sandbox escape
- container-escape-techniques — Docker/container specific escape techniques
-
kernel-exploitation — kernel exploit for container/namespace escape
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 3 files
skills/sandbox-escape-techniques/PYTHON_SANDBOX_ESCAPE.md
skills/sandbox-escape-techniques/SECCOMP_BYPASS.md
skills/sandbox-escape-techniques/SKILL.md