Step-by-step lab: build a container image, generate SPDX and CycloneDX SBOMs with Syft, and triage vulnerabilities with Grype severity matching. Real…
Hands-on lab showing why mounting /var/run/docker.sock gives containers host root access, with a full escape walkthrough and hardening via rootless Docker…
Build a safe, vulnerable minikube lab and practice real container escape techniques step by step: privileged pods, hostPath mounts, service account abuse, and node privilege escalation — with verified commands and blue-team detection tips.