Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Story of Escape Sequence Vulnerabilities

Avatar for Twistlock Twistlock
May 02, 2018
Technology
0
100

The Story of Escape Sequence Vulnerabilities

By Ariel Zelivansky, Security Researcher, Twistlock
Avatar for Twistlock

Twistlock

May 02, 2018
Tweet

More Decks by Twistlock

See All by Twistlock
Container Security & Application Modernization
Avatar for Twistlock twistlock
0
94
2019 CISO Leadership Forum: Security 3.0 – Shifting to Automation
Avatar for Twistlock twistlock
0
76
AWS Containerized and Serverless services for running enterprise code at scale
Avatar for Twistlock twistlock
0
38
A Continuous Journey with Jenkins
Avatar for Twistlock twistlock
0
32
How Containers Change the Security Paradigm
Avatar for Twistlock twistlock
0
39
Going Infinite, handling 1M websockets connections in Go
Avatar for Twistlock twistlock
0
150
DevSecOps meets GitOps with Twistlock and Weaveworks
Avatar for Twistlock twistlock
0
150
Real World Security: Software Supply Chain
Avatar for Twistlock twistlock
0
100
Exploiting Alpine Linux From Vulnerability to Code Execution
Avatar for Twistlock twistlock
1
370

Other Decks in Technology

See All in Technology
AWS認定を取る中で感じたこと
Avatar for Siromi siromi
1
140
MUITにおける開発プロセスモダナイズの取り組みと開発生産性可視化の取り組みについて / Modernize the Development Process and Visualize Development Productivity at MUIT
Avatar for 三菱UFJインフォメーションテクノロジー株式会社 muit
1
9.7k
Beyond Kaniko: Navigating Unprivileged Container Image Creation
Avatar for Felix Dreissig f30
0
120
B2C＆B2B＆社内向けサービスを抱える開発組織におけるサービス価値を最大化するイニシアチブ管理
Avatar for Belong inc. belongadmin
1
4.1k
マネジメントって難しい、けどおもしろい / Management is tough, but fun! #em_findy
Avatar for ar_tama ar_tama
1
190
Should Our Project Join the CNCF? (Japanese Recap)
Avatar for whywaita whywaita
PRO
0
310
Github Copilot エージェントモードで試してみた
Avatar for Ochtum ochtum
0
140
Core Audio tapを使ったリアルタイム音声処理のお話
Avatar for Sloth yuta0306
0
160
20250625 Snowflake Summit 2025活用事例 レポート / Nowcast Snowflake Summit 2025 Case Study Report
Avatar for K.Osawa kkuv
1
390
KiCadでPad on Viaの基板作ってみた
Avatar for misoji engineer iotengineer22
0
250
生成AI時代の開発組織・技術・プロセス 〜 ログラスの挑戦と考察 〜
Avatar for Hiroshi Ito itohiro73
1
390
SmartNewsにおける 1000+ノード規模 K8s基盤 でのコスト最適化 – Spot・Gravitonの大規模導入への挑戦
Avatar for ishikawa ryu vsanna2
0
100

Featured

See All Featured
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
71
11k
How STYLIGHT went responsive
Avatar for nonsquared nonsquared
100
5.6k
Visualization
Avatar for Eitan Lees eitanlees
146
16k
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
Gamification - CAS2011
Avatar for David Bonilla davidbonilla
81
5.3k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
301
51k
Fireside Chat
Avatar for paigeccino paigeccino
37
3.5k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
277
23k
Side Projects
Avatar for Sacha Greif sachag
455
42k
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
10
940
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
29
9.5k
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
55
5.6k

Transcript

  1. None

  2. • • • ◦ • • ◦

  3. • • ◦ ◦ • ◦ ◦

  4. • • ◦ • ◦ ◦

  5. • echo -e “\e[31mHello world\e[0m” (or \033, \x1B)

  6. • ◦ ◦ • ◦ ◦

  7. • ◦ ◦ • ◦ ◦ ◦ ◦

  8. • ◦ • •

  9. • ◦ • ◦ echo -ne "\033[0;0;0;0;0;0;0;0;00000000000000000000001094795585;00000000000 000000000001094795585" > fifo

    ◦

  10. • ◦ ◦ • ◦ ◦

  11. • •

  12. None

  13. • • ◦ ◦

  14. • ◦ • • •

  15. • printable_string •

  16. • • ◦ •

  17. • • ◦ ◦

  18. • •

  19. • • • •

  20. • ◦ ◦ ◦ ◦

  21. • • ◦ ◦ •

  22. None
  23. None

  24. Ariel Zelivansky a