Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Story of Escape Sequence Vulnerabilities

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Twistlock Twistlock
May 02, 2018
Technology
110
0

The Story of Escape Sequence Vulnerabilities

By Ariel Zelivansky, Security Researcher, Twistlock

Avatar for Twistlock

Twistlock

May 02, 2018

More Decks by Twistlock

See All by Twistlock
Container Security & Application Modernization
Avatar for Twistlock twistlock
0
100
2019 CISO Leadership Forum: Security 3.0 – Shifting to Automation
Avatar for Twistlock twistlock
0
82
AWS Containerized and Serverless services for running enterprise code at scale
Avatar for Twistlock twistlock
0
45
A Continuous Journey with Jenkins
Avatar for Twistlock twistlock
0
37
How Containers Change the Security Paradigm
Avatar for Twistlock twistlock
0
45
Going Infinite, handling 1M websockets connections in Go
Avatar for Twistlock twistlock
0
160
DevSecOps meets GitOps with Twistlock and Weaveworks
Avatar for Twistlock twistlock
0
170
Real World Security: Software Supply Chain
Avatar for Twistlock twistlock
0
110
Exploiting Alpine Linux From Vulnerability to Code Execution
Avatar for Twistlock twistlock
1
430

Other Decks in Technology

See All in Technology
AI全盛の今だからこそ、あえてもう一度振り返るAPIの基礎
Avatar for Makky12 smt7174
3
150
コーポレートサイトのアクセシビリティ改善とJIS準拠への実践
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
2
110
RubyでRuby拡張を書いたらRubyより35倍速になったってどういうこと？？
Avatar for kazuho kazuho
3
490
開発にAIを組織として取り入れる一歩目とその後
Avatar for 渋谷悠司 yujishibuya
0
170
JaSSTに関わることで変わった人生観 #jasstnano
Avatar for Makky makky_tyuyan
0
170
既存プロダクトQAから新規プロダクトQAへ
Avatar for hashi ryotakahashi
0
180
AWS運用におけるAI Agent活用術 / JAWS-UG 神戸 #11 LT大会
Avatar for GENDA genda
1
330
CARTA HOLDINGS エンジニア向け 採用ピッチ資料 / CARTA-GUIDE-for-Engineers
Avatar for CARTA Engineering carta_engineering
0
47k
The Making of AI Chips
Avatar for Preferred Networks pfn
PRO
0
660
GitHub Copilot CLI の Rubber Duck 機能を使ってコーディングの品質をあげよう #techbaton_findy
Avatar for すてにゃん stefafafan
1
330
[みん強]AIの価値を最大化するデータ基盤戦略：Self-Service型Data Meshへの転換とAgentic AI Meshに向けた取り組み with Snowflake他
Avatar for Matsubara y_matsubara
1
170
LT準備のToilを削減 〜決定論×確率論のスライド生成CLI〜
Avatar for Shu Kobuchi shukob
0
120

Featured

See All Featured
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
280
Claude Code どこまでも/ Claude Code Everywhere
Avatar for nwiizo nwiizo
65
55k
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
770
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Design in an AI World
Avatar for tapps tapps
1
210
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
10
1.2k
Navigating Team Friction
Avatar for Lara Hogan lara
192
16k
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
Avatar for Sophie Logan marketingsoph
0
150
Jess Joyce - The Pitfalls of Following Frameworks
Avatar for Tech SEO Connect techseoconnect
PRO
1
150
End of SEO as We Know It (SMX Advanced Version)
Avatar for Michael King ipullrank
3
4.2k
The Organizational Zoo: Understanding Human Behavior Agility Through Metaphoric Constructive Conversations (based on the works of Arthur Shelley, Ph.D)
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
330
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
231
23k

Transcript

  1. None

  2. • • • ◦ • • ◦

  3. • • ◦ ◦ • ◦ ◦

  4. • • ◦ • ◦ ◦

  5. • echo -e “\e[31mHello world\e[0m” (or \033, \x1B)

  6. • ◦ ◦ • ◦ ◦

  7. • ◦ ◦ • ◦ ◦ ◦ ◦

  8. • ◦ • •

  9. • ◦ • ◦ echo -ne "\033[0;0;0;0;0;0;0;0;00000000000000000000001094795585;00000000000 000000000001094795585" > fifo

    ◦

  10. • ◦ ◦ • ◦ ◦

  11. • •

  12. None

  13. • • ◦ ◦

  14. • ◦ • • •

  15. • printable_string •

  16. • • ◦ •

  17. • • ◦ ◦

  18. • •

  19. • • • •

  20. • ◦ ◦ ◦ ◦

  21. • • ◦ ◦ •

  22. None
  23. None

  24. Ariel Zelivansky a