Sandbox Escape Techniques

This is a comprehensive reference for breaking out of restricted execution environments, covering everything from CTF pyjails to Docker containers. It's structured as a decision tree with concrete techniques: Python subclass walks to recover builtins, Lua FFI abuse, chroot double-escape patterns, and browser Mojo IPC exploitation. The skill distinguishes between sandbox types (which base models apparently confuse) and provides actual one-liners and code snippets rather than theory. Clearly written for offensive security work, CTF competitions, and penetration testing where you need to escalate from restricted code execution to unrestricted system access. The cross-references to related skills like kernel exploitation and container escape suggest it's part of a larger offensive toolkit.

skills.sh installs: 3.7K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill sandbox-escape-techniques --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Sandbox Escape — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert sandbox escape techniques across Python, Lua, seccomp, chroot, Docker/container, and browser sandbox contexts. Covers CTF pyjail patterns, seccomp architecture confusion, chroot fd leaks, namespace escape, and Mojo IPC abuse. Distilled from ctf-wiki sandbox sections and real-world container escapes. Base models often miss the distinction between sandbox types and apply wrong escape techniques.

0. RELATED ROUTING

browser-exploitation-v8 — V8 exploitation for renderer RCE before browser sandbox escape
container-escape-techniques — Docker/container specific escape techniques
kernel-exploitation — kernel exploit for container/namespace escape
linux-privilege-escalation — post-escape privilege escalation