Home▸Cybersecurity▸Container Escape via Shared Kernel

Container Escape via Shared Kernel

Interactive 3D host running several containers on one shared Linux kernel: compromise a container, then toggle it hardened or misconfigured to see whether the attacker stays trapped or breaks out through the kernel into every other container. Live blast-radius readout across repeated randomized trials.

Cybersecurity3DAdvanced60 FPS🔥 Fire

Six containers sit on one host, all sharing the same Linux kernel underneath. Compromise a container, then decide whether it's hardened or misconfigured — and watch whether the attacker stays trapped behind its namespace boundary or breaks through the shared kernel to spread to every other container on the host. Run repeated randomized trials to compare the average blast radius of hardened versus misconfigured containers.

⚙ Under the hood

Six containers share one host's Linux kernel: click a container to compromise it, then toggle it hardened or misconfigured (privileged mode, host mount, extra capability) to see whether the attacker stays trapped behind its namespace boundary or breaks through the shared kernel to spread into every other container on the host. Live blast-radius readout compares outcomes across repeated randomized trials.

container escapeshared kernelnamespacescgroupsprivileged containercybersecurityThree.js

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install