ワンクリックでManusで任意のスキルを実行

competition-kernel-container-escape

スター8,362

フォーク1,314

更新日2026年5月24日 11:23

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for kernel attack surface, namespace and cgroup boundaries, container isolation assumptions, syscall paths, and escape primitive verification. Use when the user asks to analyze container-to-host escape paths, kernel exploit prerequisites, namespace crossover, capability misuse, or prove whether an exploit primitive crosses the sandbox boundary. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

インストール

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

Manusで実行

ソース

zhaoxuya520

zhaoxuya520/reverse-skill

GitHub リポジトリを開く Creator のリポジトリを見る

ダウンロード

Manusで実行

Competition Kernel Container Escape

Use this skill only as a downstream specialization after $ctf-sandbox-orchestrator is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to $ctf-sandbox-orchestrator first.

Use this skill when the decisive step is proving a boundary crossing between containerized context and host or higher-privilege kernel context.

Reply in Simplified Chinese unless the user explicitly requests English.

Quick Start

Map runtime isolation first: namespaces, cgroups, seccomp, capabilities, LSM, and mount boundaries.
Separate exploit prerequisite, primitive, and boundary-crossing proof.
Record kernel version, config hints, runtime options, and reachable syscall surface.
Keep instrumented observations separate from pristine challenge path.
Reproduce one minimal primitive-to-boundary-crossing chain.

Workflow

1. Map Isolation And Kernel Surface

Record namespace map, cgroup mode, capabilities, seccomp profile, AppArmor or SELinux state, mounted filesystems, and runtime sockets.
Note kernel version, distro build hints, module exposure, and container runtime behavior.
Keep host and container observations linked to exact node and context.

2. Prove Exploit Primitive And Crossover

Show controllable input, trigger condition, affected object, and observable kernel or runtime state change.
Capture before and after identity, namespace, mount, or process visibility to prove boundary crossing.
Distinguish crash-only behavior from stable capability gain.

3. Reduce To Decisive Escape Chain

Compress to: prerequisite state -> primitive trigger -> boundary crossing evidence -> resulting host-level capability.
State whether root cause is kernel vulnerability, runtime misconfiguration, capability overgrant, or namespace leak.
If path relies mostly on credential replay after initial foothold, hand off to Linux credential pivot skill.

Read This Reference

Load references/kernel-container-escape.md for isolation checklist, primitive checklist, and parity guidance.

What To Preserve

Kernel and runtime context, capability set, seccomp or LSM state, and namespace map
Primitive trigger data, boundary crossing evidence, and resulting capability
One minimal reproducible chain from container context to host-relevant effect

このリポジトリの他の Skills

同じリポジトリ

pentest-tools

zhaoxuya520/reverse-skill

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

2026-07-108.4k

reverse-engineering

zhaoxuya520/reverse-skill

Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.

2026-07-058.4k

apk-reverse

zhaoxuya520/reverse-skill

在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。

2026-07-038.4k

binary-diff

zhaoxuya520/reverse-skill

跨版本符号迁移与二进制差分。当你有旧版本的符号/逆向结果，需要快速迁移到新版本时使用。适用场景：内核缺 PDB 用旧版符号推导、程序更新后批量迁移函数名、应用更新后快速定位新偏移。核心方法：用 LLM 做结构化差异比对，程序化输入输出，成本极低（200 函数 ~1 元）。触发关键词：符号迁移、bindiff、跨版本、PDB 缺失、函数偏移迁移、symbol migration、binary diff、版本对比。

2026-07-038.4k

diagram-generator

zhaoxuya520/reverse-skill

generate, refine, validate, and render diagrams from natural language, notes, code snippets, schemas, tables, or existing diagram source. use for flowcharts, swimlanes, sequence diagrams, state diagrams, er diagrams, class diagrams, architecture/c4-style diagrams, dependency graphs, gantt charts, mind maps, user journeys, sankey-style flows, org charts, network graphs, and other visual models. supports mermaid by default, graphviz dot for complex graph layout, plantuml for uml-heavy engineering diagrams, and svg output when direct markup is more reliable.

2026-07-038.4k

edr-bypass-re

zhaoxuya520/reverse-skill

逆向防御方实现 → 红队针对性绕过。把 EDR / Defender / AV 的 hook 表、ETW provider、AMSI 实现先逆向出来，再写针对性的 unhook / 间接 syscall / ETW patch / call stack spoof。对照 MITRE ATT&CK T1562 防御规避。触发关键词：EDR 绕过、AV bypass、免杀、unhook、direct syscall、indirect syscall、Hell's Gate、Halo's Gate、 Tartarus Gate、ETW patch、AMSI patch、call stack spoofing、hardware breakpoint Blindside、MITRE T1562、 ntdll unhook、kernel callback、CrowdStrike 绕过、Defender 绕过、Sentinel One 绕过、Elastic Defend、 Sysmon 规避、PPID spoof、Sleep mask、Process Hollowing、Reflective DLL。

2026-07-038.4k

name

competition-kernel-container-escape

description

Competition Kernel Container Escape

Use this skill when the decisive step is proving a boundary crossing between containerized context and host or higher-privilege kernel context.

Reply in Simplified Chinese unless the user explicitly requests English.

Quick Start

Map runtime isolation first: namespaces, cgroups, seccomp, capabilities, LSM, and mount boundaries.
Separate exploit prerequisite, primitive, and boundary-crossing proof.
Record kernel version, config hints, runtime options, and reachable syscall surface.
Keep instrumented observations separate from pristine challenge path.
Reproduce one minimal primitive-to-boundary-crossing chain.

Workflow

1. Map Isolation And Kernel Surface

Record namespace map, cgroup mode, capabilities, seccomp profile, AppArmor or SELinux state, mounted filesystems, and runtime sockets.
Note kernel version, distro build hints, module exposure, and container runtime behavior.
Keep host and container observations linked to exact node and context.

2. Prove Exploit Primitive And Crossover

Show controllable input, trigger condition, affected object, and observable kernel or runtime state change.
Capture before and after identity, namespace, mount, or process visibility to prove boundary crossing.
Distinguish crash-only behavior from stable capability gain.

3. Reduce To Decisive Escape Chain

Compress to: prerequisite state -> primitive trigger -> boundary crossing evidence -> resulting host-level capability.
State whether root cause is kernel vulnerability, runtime misconfiguration, capability overgrant, or namespace leak.
If path relies mostly on credential replay after initial foothold, hand off to Linux credential pivot skill.

Read This Reference

Load references/kernel-container-escape.md for isolation checklist, primitive checklist, and parity guidance.

What To Preserve

Kernel and runtime context, capability set, seccomp or LSM state, and namespace map
Primitive trigger data, boundary crossing evidence, and resulting capability
One minimal reproducible chain from container context to host-relevant effect