36 lines
840 B
YAML
36 lines
840 B
YAML
version: '3.8'
|
|
|
|
services:
|
|
# CRITICAL: Multiple severe security issues
|
|
dangerous-app:
|
|
image: nginx:latest
|
|
container_name: dangerous-container
|
|
|
|
# CRITICAL: Privileged mode - full host access
|
|
privileged: true
|
|
|
|
# CRITICAL: Docker socket mounted - container escape possible
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- /etc/passwd:/host-passwd:ro
|
|
- /root/.ssh:/ssh-keys:ro
|
|
|
|
# CRITICAL: Dangerous capabilities
|
|
cap_add:
|
|
- SYS_ADMIN
|
|
- NET_ADMIN
|
|
- SYS_PTRACE
|
|
|
|
# MEDIUM: Running on host network
|
|
network_mode: host
|
|
|
|
# MEDIUM: No security options
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
|
|
environment:
|
|
# CRITICAL: Hardcoded secrets
|
|
- AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
|
|
- DATABASE_PASSWORD=SuperSecret123
|