Bought the Docker socket abuse kit. Single liner mounts host FS in container, privilege escalate to root, tested on Debian 12 & CentOS Stream. PoC includes cleanup scripts to delete audit logs. Communication via XMPP/OMEMO was smooth; GPG key rotated weekly—good OPSEC.