Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Story of Escape Sequence Vulnerabilities

Avatar for Twistlock Twistlock
May 02, 2018
Technology
0
100

The Story of Escape Sequence Vulnerabilities

By Ariel Zelivansky, Security Researcher, Twistlock

Avatar for Twistlock

Twistlock

May 02, 2018
Tweet

More Decks by Twistlock

See All by Twistlock
Container Security & Application Modernization
Avatar for Twistlock twistlock
0
96
2019 CISO Leadership Forum: Security 3.0 – Shifting to Automation
Avatar for Twistlock twistlock
0
78
AWS Containerized and Serverless services for running enterprise code at scale
Avatar for Twistlock twistlock
0
41
A Continuous Journey with Jenkins
Avatar for Twistlock twistlock
0
34
How Containers Change the Security Paradigm
Avatar for Twistlock twistlock
0
42
Going Infinite, handling 1M websockets connections in Go
Avatar for Twistlock twistlock
0
150
DevSecOps meets GitOps with Twistlock and Weaveworks
Avatar for Twistlock twistlock
0
150
Real World Security: Software Supply Chain
Avatar for Twistlock twistlock
0
110
Exploiting Alpine Linux From Vulnerability to Code Execution
Avatar for Twistlock twistlock
1
400

Other Decks in Technology

See All in Technology
Meshy Proプラン課金した
Avatar for henjin0 henjin0
0
180
クレジットカード決済基盤を支えるSRE - 厳格な監査とSRE運用の両立 (SRE Kaigi 2026)
Avatar for capytan capytan
6
1.8k
Agile Leadership Summit Keynote 2026
Avatar for seki at druby.org m_seki
1
120
AI時代、1年目エンジニアの悩み
Avatar for JINYOUNG KIM jin4
1
150
Introduction to Sansan, inc / Sansan Global Development Center, Inc.
Avatar for Sansan, Inc. sansan33
PRO
0
3k
入社1ヶ月でデータパイプライン講座を作った話
Avatar for Yuta Ozaki waiwai2111
1
210
コスト削減から「セキュリティと利便性」を担うプラットフォームへ
Avatar for SansanTech sansantech
PRO
3
990
インフラエンジニア必見!Kubernetesを用いたクラウドネイティブ設計ポイント大全
Avatar for 高棹大樹 daitak
0
130
顧客の言葉を、そのまま信じない勇気
Avatar for yamatai12 yamatai1212
1
270
分析画面のクリック操作をそのままコード化 ！ エンジニアとビジネスユーザーが共存するAI-ReadyなBI基盤
Avatar for ikumi ikumi
0
130
外部キー制約の知っておいて欲しいこと - RDBMSを正しく使うために必要なこと / FOREIGN KEY Night
Avatar for soudai sone soudai
PRO
7
1.8k
30万人の同時アクセスに耐えたい！新サービスの盤石なリリースを支える負荷試験 / SRE Kaigi 2026
Avatar for GENDA genda
1
140

Featured

See All Featured
Building Better People: How to give real-time feedback that sticks.
Avatar for Will Jessup wjessup
370
20k
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
85
9.4k
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
320
Agile Leadership in an Agile Organization
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
78
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
187
22k
Un-Boring Meetings
Avatar for Sebastian Deterding codingconduct
0
200
Navigating Team Friction
Avatar for Lara Hogan lara
192
16k
Leveraging LLMs for student feedback in introductory data science courses - posit::conf(2025)
Avatar for Mine Cetinkaya-Rundel minecr
0
130
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
210
24k
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
0
170
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
190
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
55
3.2k

Transcript

  1. None

  2. • • • ◦ • • ◦

  3. • • ◦ ◦ • ◦ ◦

  4. • • ◦ • ◦ ◦

  5. • echo -e “\e[31mHello world\e[0m” (or \033, \x1B)

  6. • ◦ ◦ • ◦ ◦

  7. • ◦ ◦ • ◦ ◦ ◦ ◦

  8. • ◦ • •

  9. • ◦ • ◦ echo -ne "\033[0;0;0;0;0;0;0;0;00000000000000000000001094795585;00000000000 000000000001094795585" > fifo

    ◦

  10. • ◦ ◦ • ◦ ◦

  11. • •

  12. None

  13. • • ◦ ◦

  14. • ◦ • • •

  15. • printable_string •

  16. • • ◦ •

  17. • • ◦ ◦

  18. • •

  19. • • • •

  20. • ◦ ◦ ◦ ◦

  21. • • ◦ ◦ •

  22. None
  23. None

  24. Ariel Zelivansky a