pentester.land· May 30, 2023· by Leon Jacobs (@leonjza)

an offensive look at docker desktop extensions

Target Program: Docker

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#OS command injection#Container security