Container Security Masterclass: Web App Exploitation & Breakouts

Container Security Masterclass: Web App Exploitation & Breakouts

by Prabh Nair and Divyanshu · View the channel on PSI

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Prabh Nair and Divyanshu 👥 189K 📅 October 19, 2026 ⏱ 69 min 👁 2K 📄 tutorial 🧭 2026-10-21
Available in: English (current) Français

Keywords

containerDockerbreakoutCVE-2025-3248security

Summary

The video is a practical masterclass on offensive container security, hosted by Prabh Nair and featuring Divyanshu, a staff security engineer. It begins with foundational concepts such as what containers are, how they differ from virtual machines, and the roles of namespaces and cgroups. The presenters explain Docker images, Dockerfiles, and Docker Compose, emphasizing common security pitfalls like trusting unverified images. The core of the session is a live demonstration of an attack chain: exploiting a web application vulnerability (CVE-2025-3248, a pre-authenticated vulnerability in Langflow) to gain remote code execution inside a container, and then breaking out of the container via a Docker socket misconfiguration. Throughout, they stress the importance of understanding how attackers chain vulnerabilities—from application-level flaws to infrastructure misconfigurations—to assess and improve defensive postures. The session also references an open-source documentation site for further learning. The tone is educational and practical, with detailed walkthroughs and justifications for each step.

151 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value lies in its hands-on approach, showing real attack paths rather than abstract theory. The argumentation is solid within the demonstrated practical context: the presenters explain why each step is possible and what misconfiguration enables it. They effectively link the web app exploitation to container breakout, making a compelling case for understanding the full kill chain. However, the argumentation is based on a single use-case and does not explore alternative scenarios or defense measures in depth, which limits its generalizability.

Scientific Rigor, Source Quality, Title Accuracy

The video maintains moderate scientific rigor: it is based on the presenters’ expertise and an open-source documentation site, but it lacks formal references to external research or official CVE details. The title matches the content accurately. No independent sources are cited beyond the workshop documentation, and no comments were provided for analysis.

148 words

Title / Content Match

The title accurately reflects the content: the video demonstrates web application exploitation leading to container breakout, as promised.

Quality & Reliability

7/10

The video features two practitioners with real-world experience in container and cloud security, demonstrating a practical attack chain. However, claims are based on expert opinion and the provided documentation, without formal citations or academic references, and the demonstrated vulnerability is not independently verified.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Contribution & Novelties

The video provides an original, step-by-step demonstration of how a web application vulnerability can be chained to a container breakout, using a real CVE (CVE-2025-3248) and shared open-source resources. It emphasizes the ‘attack chaining’ concept, which is often overlooked in isolated vulnerability discussions. This practical perspective helps developers and security professionals understand the real-world impact of misconfigurations.

Pour aller plus loin :

  • Docker (software) — Overview of Docker, fundamental to understanding container technology.
  • CVE-2025-3248 — Details of the specific vulnerability exploited in the video.
  • Linux namespaces — Essential background on the isolation mechanism used in containers.
  • cgroups — Resource limiting technology that complements namespaces in container runtime.

107 words

Radar Profile

The radar profile shows high scores in quantity and level of technical detail, indicating a dense and technically deep content. Quality and reliability are moderately high, reflecting the practical expertise of the presenters but a lack of formal citations. The overall balance suggests a valuable hands-on resource for professionals, though not a rigorously academic one.

Reliability 7/10