The Docker Rodeo

To access material, start machines and answer questions login.

The prerequisites for this room are a bit more complicated then most rooms, however, I'll detail every step of the way.

1.1. Getting Setup

1.1.1. I strongly recommend using the TryHackMe AttackBox for this room for the most reliable experience.

1.1.2. Deploy the Instance attached to this room and wait for the IP address to be displayed.

Take note of the IP address for your deployed Instance: MACHINE_IP

1.2. Add your Instance IP address to /etc/hosts

Once you have been given your IP address, you will need to create an entry in your /etc/hosts file with both the IP address and docker-rodeo.thm

1.2.1. sudo nano /etc/hosts

1.2.2. Add the entry so that it looks like the following:

MACHINE_IP docker-rodeo.thm

1.2.3. Save and close the file.

1.3. Tell Docker to Trust your Instance

1.3.1. You will need to either create or enter the following into /etc/docker/daemon.json:

{

"insecure-registries" : ["docker-rodeo.thm:5000","docker-rodeo.thm:7000"]

}

1.3.2. Save and close the file.

1.4. Restart Docker

1.4.1. For the changes to apply, you will need to stop then start (not just restart) the Docker service:

1.4.1. sudo systemctl stop docker

1.4.2. Wait for approximately 30 seconds

1.4.3. sudo systemctl start docker

You are now ready to progress with the room.

Answer the questions below

Let's go

Ready to learn Cyber Security?

The The Docker Rodeo room is only available for premium users. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.

Already have an account? Log in

The Docker Rodeo

Task 11. Preface: Setting up Docker for this Room (Deploy #1)Task includes a deployable machine

Task 22. Introduction to DockerPremium

Task 33. Vulnerability #1: Abusing a Docker RegistryPremium

Task 43.1. What is a Docker Registry?Premium

Task 53.2. Interacting with a Docker RegistryPremium

Task 64. Vulnerability #2: Reverse Engineering Docker ImagesPremium

Task 75. Vulnerability #3: Uploading Malicious Docker ImagesPremium

Task 86. Vulnerability #4: RCE via Exposed Docker DaemonPremium

Task 97. Vulnerability #5: Escape via Exposed Docker DaemonPremium

Task 108. Vulnerability #6: Shared NamespacesPremium

Task 119. Vulnerability #7: Misconfigured Privileges (Deploy #2)Premium

Task 1210. Securing Your ContainerPremium

Task 1311. Bonus: Determining if we're in a containerPremium

Task 1412. Additional MaterialPremium

Ready to learn Cyber Security?