Container Escape

Description

Test container escape vectors on: $ARGUMENTS 1. **Container info**: Identify runtime (Docker/containerd/CRI-O), check cgroup version, namespace isolation 2. **Privileged check**: Test if container is privileged (--privileged), has dangerous capabilities (SYS_ADMIN, SYS_PTRACE, DAC_OVERRIDE) 3. **Mount check**: Look for mounted Docker socket (/var/run/docker.sock), host filesystem mounts, sensitive procfs/sysfs 4. **Kernel exploits**: Check kernel version for known container escapes (CVE-2022-01

Installation

Installs to ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-container-escape.md

Restart Claude Code, or start a new session, for it to be picked up.