Imagine a scenario where container-level endpoint security is part of a larger overall strategy to protect sensitive data in containers from users with administrator access to the Linux systems that host those containers. In an ideal world, the IT staff would have access to manage the overall system but would somehow be prevented from accessing the actual data. However, in reality, penetration testers recognize the dangers of accessing the sensitive data by manipulating the container processes from the host level regardless of how secure the endpoint protection strategy actually is.

With asminject.py, penetration testers have a helpful tool to understand attack scenarios against Linux-trusted processes and containers. By injecting arbitrary binary code via the Linux process filesystem (procfs) interface, pen testers can compromise trusted processes demonstrating critical flaws in security strategies intended to keep sensitive data hidden from unauthorized users.

In this technical guide, you will learn:

• Why asminject.py was created

• How to use asminject.py for pen testing
• The results of using asminject.py on a real-world problem