LOADING N0PERM…
Command-line client for managing containers, reviewing volume boundaries, auditing seccomp/AppArmor security profiles, and configuring capability drop flags.
A standard CONTAINER_SECURITY utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Linux official installation
curl -fsSL https://get.docker.com | shHardened container execution flags:
- Drop all kernel capabilities except needed: docker run --cap-drop=ALL --cap-add=NET_BIND_SERVICE ...
- Enforce read-only root filesystem: docker run --read-only --tmpfs /tmp ...
- Prevent privilege escalation via setuid: docker run --security-opt=no-new-privileges ...
- Inspect container cgroups and namespaces: docker inspect --format '{{.HostConfig.SecurityOpt}}' <CONTAINER_ID>