Key Skills Gained from the Offensive Container Security Workshop: 1. Container Security Foundations & Auditing • Dockerfile Security Review: Identifying security flaws in container build files, such as hardcoded secrets, outdated base images, excessive layer additions, and improper root user configurations. • Static Analysis for Containers: Running static scanning tools on Dockerfiles to catch CVEs and misconfigurations before build time. • Docker Architecture & Compose Security: Understanding how Docker interacts with the host and configuring multi-container setups securely using Docker Compose. 2. Secure Image Build & Delivery • Image Hardening & Minimization: Building slim, minimal attack-surface images (e.g., slim Python runtimes) to reduce unnecessary binaries and vulnerabilities. • Registry & Lifecycle Security: Understanding container image registries, image layers, and lifecycle management. 3. Offensive Runtime Exploitation & Escapes • Host Boundary & Mount Exploitation: Attacking vulnerable host volume mounts to break container isolation and access the underlying host system. • Linux Capabilities Abuse: Exploiting misconfigured or excessive Linux capabilities (e.g., CAP_SYS_ADMIN, CAP_NET_ADMIN) for privilege escalation and container breakouts. • Hands-on Cloud Lab Environment: Working inside cloud-based development and attack environments (GitHub Codespaces) to simulate real-world offensive attack scenarios.