The Story of Escape Sequence Vulnerabilities

By Ariel Zelivansky, Security Researcher, Twistlock

Transcript

2. • • • ◦ • • ◦
3. • • ◦ ◦ • ◦ ◦
4. • • ◦ • ◦ ◦
5. • echo -e “\e[31mHello world\e[0m” (or \033, \x1B)
6. • ◦ ◦ • ◦ ◦
7. • ◦ ◦ • ◦ ◦ ◦ ◦
8. • ◦ • •
9. • ◦ • ◦ echo -ne "\033[0;0;0;0;0;0;0;0;00000000000000000000001094795585;00000000000 000000000001094795585" > fifo ◦
10. • ◦ ◦ • ◦ ◦
11. • •
13. • • ◦ ◦
14. • ◦ • • •
15. • printable_string •
16. • • ◦ •
17. • • ◦ ◦
18. • •
19. • • • •
20. • ◦ ◦ ◦ ◦
21. • • ◦ ◦ •
24. Ariel Zelivansky a