← ReflexSec
Containers
Every command ReflexSec uses, with the explanation behind the call. No timer — read at your own pace.
AllFile SystemNetworkingPrivilege EscalationPersistenceCredential AccessData ExfiltrationProcess ExecutionShellContainersCloudGit / DevelopmentLinuxmacOSWindowsPowerShellPythonJavaScript / NodeDockerKubernetesCI/CDWeb Security
- Dangerous
docker run --privileged -v /:/host -it alpineAdvanced - Safe
docker exec -it web shExpert - Dangerous
docker run -v /var/run/docker.sock:/var/run/docker.sock -it alpineAdvanced - Dangerous
docker run -d --restart=always -v /:/mnt alpine sh -c 'sleep infinity'Expert - Safe
docker run --rm -v "$PWD":/work:ro -w /work node:20-alpine npm run lintNightmare - Safe
docker exec app-1 cat /app/logs/startup.logProIntermediate - Dangerous
sudo docker run --privileged -v /:/host node:20 node /host/srv/app/fix.jsProAdvanced - Safe
kubectl exec deploy/api -- env | grep -c DATABASE_URLProAdvanced - Safe
docker run --rm --read-only --user 10001 app:1.4.2 node ./scripts/report.jsProAdvanced - Safe
docker image inspect app:1.4.2 --format '{{index .RepoDigests 0}}'ProAdvanced - Safe
exec ./bin/app-server --config ./config/prod.yamlProExpert - Dangerous
docker run --rm --privileged -it alpineProIntermediate - Dangerous
docker run --rm -v /var/run/docker.sock:/var/run/docker.sock docker:cli psProAdvanced - Safe
docker run --rm --network none -v "$PWD":/src:ro scanner:2.1 fs /srcProNightmare - Safe
kubectl exec api-0 -- ls -la /app/configProIntermediate - Dangerous
kubectl run shell --image=alpine --restart=Never -it --privileged -- shProAdvanced - Dangerous
kubectl run node-probe --image=alpine --restart=Never --overrides='{"spec":{"hostPID":true,"hostNetwork":true}}' -- sleep 3600ProExpert - Dangerous
helm upgrade --install ingress community/ingress --set controller.hostNetwork=trueProExpert - Safe
virsh snapshot-revert analysis-vm clean-baselineProNightmare - Safe
docker create --name inspect sample-image:latest && docker export inspect -o ./fs.tarProNightmare - Dangerous
docker run --rm -it --network host sample-image:latestProExpert - Dangerous
virsh snapshot-delete analysis-vm clean-baselineProNightmare - Dangerous
docker build -t sample-analysis - < ./Dockerfile.sampleProExpert - Dangerous
docker run --rm --network none -v "$PWD":/s sandbox:1 /s/sample-8f2a.binProNightmare - Dangerous
qemu-img commit ./analysis-overlay.qcow2ProNightmare