Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Story of Escape Sequence Vulnerabilities

Avatar for Twistlock Twistlock
May 02, 2018
Technology
0
100

The Story of Escape Sequence Vulnerabilities

By Ariel Zelivansky, Security Researcher, Twistlock

Avatar for Twistlock

Twistlock

May 02, 2018
Tweet

More Decks by Twistlock

See All by Twistlock
Container Security & Application Modernization
Avatar for Twistlock twistlock
0
96
2019 CISO Leadership Forum: Security 3.0 – Shifting to Automation
Avatar for Twistlock twistlock
0
78
AWS Containerized and Serverless services for running enterprise code at scale
Avatar for Twistlock twistlock
0
40
A Continuous Journey with Jenkins
Avatar for Twistlock twistlock
0
33
How Containers Change the Security Paradigm
Avatar for Twistlock twistlock
0
41
Going Infinite, handling 1M websockets connections in Go
Avatar for Twistlock twistlock
0
150
DevSecOps meets GitOps with Twistlock and Weaveworks
Avatar for Twistlock twistlock
0
150
Real World Security: Software Supply Chain
Avatar for Twistlock twistlock
0
110
Exploiting Alpine Linux From Vulnerability to Code Execution
Avatar for Twistlock twistlock
1
380

Other Decks in Technology

See All in Technology
Introdução a Service Mesh usando o Istio
Avatar for Aecio Pires aeciopires
1
280
コンパウンド組織のCRE #cre_meetup
Avatar for LayerX layerx
PRO
1
260
RemoteFunctionを使ったコロケーション
Avatar for Matsumoto Kazutaka mkazutaka
1
110
SRE × マネジメントレイヤーが挑戦した組織・会社のオブザーバビリティ改革 ― ビジネス価値と信頼性を両立するリアルな挑戦
Avatar for coconala_engineer coconala_engineer
0
210
SCONE - 動画配信の帯域を最適化する新プロトコル
Avatar for kazuho kazuho
1
370
ゼロコード計装導入後のカスタム計装でさらに可観測性を高めよう
Avatar for SansanTech sansantech
PRO
1
340
現場の壁を乗り越えて、 「計装注入」が拓く オブザーバビリティ / Beyond the Field Barriers: Instrumentation Injection and the Future of Observability
Avatar for Kento Kimura aoto
PRO
1
390
デザインとエンジニアリングの架け橋を目指す OPTiMのデザインシステム「nucleus」の軌跡と広げ方
Avatar for OPTiM optim
0
110
Dify on AWS 環境構築手順
Avatar for Hiroaki Yoshimura yosse95ai
0
120
オブザーバビリティと育てた ID管理・認証認可基盤の歩み / The Journey of an ID Management, Authentication, and Authorization Platform Nurtured with Observability
Avatar for 株式会社カミナシ kaminashi
1
630
OCIjp_Oracle AI World_Recap
Avatar for Shinya Omori shinpy
1
180
AI時代におけるデータの重要性 ~データマネジメントの第一歩~
Avatar for 太田 涼一 ryoichi_ota
0
710

Featured

See All Featured
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
97
6.3k
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
5.7k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
1k
Side Projects
Avatar for Sacha Greif sachag
455
43k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
8
300
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
36
6.1k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
35
3.2k
Embracing the Ebb and Flow
Avatar for Simon Collison colly
88
4.9k
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
10
890
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
514
110k
Principles of Awesome APIs and How to Build Them.
Avatar for Keavy McMinn keavy
127
17k
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.5k

Transcript

  1. None

  2. • • • ◦ • • ◦

  3. • • ◦ ◦ • ◦ ◦

  4. • • ◦ • ◦ ◦

  5. • echo -e “\e[31mHello world\e[0m” (or \033, \x1B)

  6. • ◦ ◦ • ◦ ◦

  7. • ◦ ◦ • ◦ ◦ ◦ ◦

  8. • ◦ • •

  9. • ◦ • ◦ echo -ne "\033[0;0;0;0;0;0;0;0;00000000000000000000001094795585;00000000000 000000000001094795585" > fifo

    ◦

  10. • ◦ ◦ • ◦ ◦

  11. • •

  12. None

  13. • • ◦ ◦

  14. • ◦ • • •

  15. • printable_string •

  16. • • ◦ •

  17. • • ◦ ◦

  18. • •

  19. • • • •

  20. • ◦ ◦ ◦ ◦

  21. • • ◦ ◦ •

  22. None
  23. None

  24. Ariel Zelivansky a