Preliminary research

No Socket, No Privs, No Problem: Weaponizing OCI Registries for SSRF, Credential Theft, and Container Escapes

David Rochester and Nicholas Gould · DEF CON

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Examines malicious OCI registry challenges and blob redirects as privileged fetch operations. Reusing a digest for a layer and configuration changes verification state and retains SSRF response bytes for exfiltration; a separate model-import path reaches an unsandboxed macOS host service from a container-accessible API.

Record

Researcher

David Rochester and Nicholas Gould

Published by

DEF CON

Format

Whitepaper

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• ssrf
• info-leak
• cache-poisoning
• docker
• rce
• attack-chain
• owasp-a05-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of David Rochester and Nicholas Gould, first published at the original source. Preserved copies are kept so the citation survives its host.