sandbox-escape-techniques
Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, container/Docker, browser sandbox, or namespace isolation to achieve unrestricted code execution or file access.
Security Assessment
Detected risks:
About sandbox-escape-techniques
An offensive-security playbook in the yaklang hack-skills collection, focused on escaping software sandboxes and isolation boundaries during authorized security testing. Per its description it covers breaking out of environments such as Python and Lua sandboxes, seccomp filters, chroot jails, containers/Docker, browser sandboxes, and namespace isolation, with the goal of assessing whether isolation can be bypassed to reach broader code execution or file access. It is framed as an expert playbook for operators evaluating the strength of sandboxing and containment in applications and infrastructure. In a catalog context it is adversary-simulation and security-research tooling used to test the robustness of isolation controls before attackers do. Because bypassing isolation can lead to unrestricted access, it should be used only against systems the tester is authorized to assess, or in research settings. Builders can use the same categories as a checklist to harden interpreter sandboxes, seccomp profiles, container configurations, and namespace boundaries.
FAQ
What does this skill cover?
Escaping sandboxes and isolation boundaries including Python/Lua sandboxes, seccomp filters, chroot jails, containers/Docker, browser sandboxes, and namespace isolation.
When is it used?
In authorized security testing to evaluate whether an application's or infrastructure's isolation controls can be bypassed.
Who is it for?
Security researchers and red-team operators assessing sandbox/containment robustness under authorization.
Is it safe to use anywhere?
No — it should only be applied to systems you are authorized to test, or in research settings.
How can builders benefit?
As a hardening checklist for interpreter sandboxes, seccomp profiles, container configs, and namespace boundaries.
Install sandbox-escape-techniques
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
yaklang/hack-skills