sandbox-escape-techniques
A comprehensive playbook for escaping multiple sandbox types encountered in CTF competitions and security research. Covers Python pyjail breakouts, Lua environment bypasses, seccomp filter evasion, chroot jailbreaks, container escape vectors, browser sandbox circumvention, and namespace isolation techniques. Includes decision trees and code patterns for each sandbox variant.
Sandbox Escape Techniques teaches methods to break out of Python, Lua, seccomp, chroot, Docker, browser, and namespace sandboxes.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-06-16
Sandbox Escape Techniques teaches methods to break out of Python, Lua, seccomp, chroot, Docker, browser, and namespace sandboxes. A comprehensive playbook for escaping multiple sandbox types encountered in CTF competitions and security research. Covers Python pyjail breakouts, Lua environment bypasses, seccomp filter evasion, chroot jailbreaks, container escape vectors, browser sandbox circumvention, and namespace isolation techniques. Includes decision trees and code patterns for each sandbox variant.
Use it when
- sandbox-escape-techniques includes seccomp evasion strategies such as architecture confusion attacks that exploit mismatches between.
- sandbox-escape-techniques documents chroot escape methods including double-escape techniques that chain multiple privilege escalation steps.
Verify before relying
Read SKILL.md below before installing (3 files). Open directory: indexed for reading, not audited.
Install
yaklang/hack-skills/sandbox-escape-techniques · repository language: CSS
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How to escape Python sandbox pyjail environments?
sandbox-escape-techniques covers multiple Python pyjail breakout methods. Common approaches include recovering `__builtins__` through object introspection, using the subclass walk technique to access restricted modules, exploiting pickle deserialization vulnerabilities, and leveraging exception handlers to execute arbitrary code. The playbook provides decision trees to identify which sandbox variant you're facing and code patterns tailored to each restriction level.
What seccomp filter bypass techniques does this cover?
sandbox-escape-techniques includes seccomp evasion strategies such as architecture confusion attacks that exploit mismatches between syscall tables on multi-architecture systems, indirect syscall invocation through legitimate library functions, and timing-based side channels. The resource maps specific seccomp policies to bypass vectors and provides exploit code patterns for common filter configurations.
How can I break out of a chroot jail?
sandbox-escape-techniques documents chroot escape methods including double-escape techniques that chain multiple privilege escalation steps, file descriptor manipulation to access parent directories, and kernel exploit vectors when running with sufficient capabilities. The playbook distinguishes between scenarios with and without root access, providing targeted breakout sequences for each.
What container escape exploit methods are included?
sandbox-escape-techniques addresses Docker and container escape vectors including privilege escalation through misconfigured capabilities, kernel exploit chains targeting namespace isolation, ptrace-based breakouts, and IPC vulnerability exploitation. The resource covers both direct container-to-host escapes and multi-stage exploitation chains commonly seen in CTF scenarios.
Does sandbox-escape-techniques cover browser sandbox bypasses?
Yes, sandbox-escape-techniques includes browser sandbox circumvention techniques for Chrome and Firefox, covering Mojo IPC vulnerabilities, renderer process escape vectors, and sandbox policy misconfigurations. The playbook explains how browser sandboxes isolate processes and documents known vulnerability patterns and exploitation chains.
What Lua sandbox breakout methods are documented?
sandbox-escape-techniques covers Lua environment bypasses including FFI (Foreign Function Interface) sandbox breakouts that allow direct C library access, metatable manipulation to override restricted functions, and environment table poisoning. The resource includes code patterns for exploiting common Lua sandbox implementations used in CTF challenges.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
SKILL: Sandbox Escape — Expert Attack Playbook
> AI LOAD INSTRUCTION: Expert sandbox escape techniques across Python, Lua, seccomp, chroot, Docker/container, and browser sandbox contexts. Covers CTF pyjail patterns, seccomp architecture confusion, chroot fd leaks, namespace escape, and Mojo IPC abuse. Distilled from ctf-wiki sandbox sections and real-world container escapes. Base models often miss the distinction between sandbox types and apply wrong escape techniques.
0. RELATED ROUTING
- browser-exploitation-v8 — V8 exploitation for renderer RCE before browser sandbox escape
- container-escape-techniques — Docker/container specific escape techniques
-
kernel-exploitation — kernel exploit for container/namespace escape
(truncated - see the full file via the links below)
File tree — 3 files
skills/sandbox-escape-techniques/PYTHON_SANDBOX_ESCAPE.md
skills/sandbox-escape-techniques/SECCOMP_BYPASS.md
skills/sandbox-escape-techniques/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Learn sandbox escape techniques for CTF and security research”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Weaponize client-side browser vulnerabilities into full host compromise by chaining JS-engine bugs through multiple sandbox layers. This skill covers V8 and JavaScriptCore exploitation, heap-sandbox escape techniques, OS-sandbox bypass via Mojo IPC and GPU processes, and Electron/webview misconfigurations. Includes scripts, references, and OPSEC guidance for assembling 1-click drive-by RCE delivery.
Containers Internals covers the low-level mechanisms that power Docker and Podman: process namespaces for isolation, cgroups v2 for resource limits, overlayfs for layered storage, and seccomp-bpf for syscall filtering. Explore runc, the OCI spec, Linux capabilities, rootless user namespaces, and practical escape mitigations.
This skill covers systematic Linux privilege escalation from low-privilege shell access to root. It walks through enumeration, SUID/SGID binary exploitation, capability abuse, cron job manipulation, NFS misconfigurations, writable system files, LD_PRELOAD tricks, Docker group abuse, and library hijacking—with specific commands and exploitation tables for each vector.
Linux Discovery helps penetration testers systematically identify privilege escalation opportunities on Linux hosts through enumeration of system configuration, sudo settings, group memberships, and kernel vulnerabilities. The skill gathers baseline system information, analyzes user context and permissions, and maps exploitable vectors while respecting scope boundaries and engagement logging.
This skill covers advanced V8 and Chrome exploitation methods, including JIT type confusion, incorrect bounds elimination, and pointer compression bypass. Learn to build addrof and fakeobj primitives, corrupt ArrayBuffer backing stores, and leverage WASM RWX pages for renderer RCE and sandbox escape.
Master techniques for analyzing and defeating code obfuscation in protected binaries. Learn to identify junk code, opaque predicates, self-modifying code, control flow flattening, movfuscator, VM protectors like VMProtect and Themida, string encryption, and import hiding. Covers both static analysis patterns and dynamic deobfuscation strategies using symbolic execution, emulation, and trace-based recovery.
More skills binary-protection-bypass (MIT)