Upgrade to Pro — share decks privately, control downloads, hide ads and more …

The Story of Escape Sequence Vulnerabilities

Avatar for Twistlock Twistlock
May 02, 2018
Technology
0
100

The Story of Escape Sequence Vulnerabilities

By Ariel Zelivansky, Security Researcher, Twistlock

Avatar for Twistlock

Twistlock

May 02, 2018
Tweet

More Decks by Twistlock

See All by Twistlock
Container Security & Application Modernization
Avatar for Twistlock twistlock
0
96
2019 CISO Leadership Forum: Security 3.0 – Shifting to Automation
Avatar for Twistlock twistlock
0
78
AWS Containerized and Serverless services for running enterprise code at scale
Avatar for Twistlock twistlock
0
40
A Continuous Journey with Jenkins
Avatar for Twistlock twistlock
0
33
How Containers Change the Security Paradigm
Avatar for Twistlock twistlock
0
41
Going Infinite, handling 1M websockets connections in Go
Avatar for Twistlock twistlock
0
150
DevSecOps meets GitOps with Twistlock and Weaveworks
Avatar for Twistlock twistlock
0
150
Real World Security: Software Supply Chain
Avatar for Twistlock twistlock
0
110
Exploiting Alpine Linux From Vulnerability to Code Execution
Avatar for Twistlock twistlock
1
380

Other Decks in Technology

See All in Technology
まずはマネコンでちゃちゃっと作ってから、それをCDKにしてみよか。
Avatar for ヤマダ（北野） yamada_r
2
120
COVESA VSSによる車両データモデルの標準化とAWS IoT FleetWiseの活用
Avatar for Yuto Osawa osawa
1
400
EncryptedSharedPreferences が deprecated になっちゃった！どうしよう！ / Oh no! EncryptedSharedPreferences has been deprecated! What should I do?
Avatar for Yuki Anzai yanzm
0
490
IoT x エッジAI - リアルタイ ムAI活用のPoCを今すぐ始め る方法 -
Avatar for niizawat niizawat
0
120
OCI Oracle Database Services新機能アップデート(2025/06-2025/08)
Avatar for oracle4engineer oracle4engineer
PRO
0
180
「どこから読む？」コードとカルチャーに最速で馴染むための実践ガイド
Avatar for ZOZO Developers zozotech
PRO
0
570
これでもう迷わない！Jetpack Composeの書き方実践ガイド
Avatar for ZOZO Developers zozotech
PRO
0
1.1k
共有と分離 - Compose Multiplatform "本番導入" の設計指針
Avatar for Ryo WATANABE error96num
2
1.2k
[ JAWS-UG 東京 CommunityBuilders Night #2 ]SlackとAmazon Q Developerで 運用効率化を模索する
Avatar for sh_fk2 sh_fk2
3
460
5年目から始める Vue3 サイト改善 #frontendo
Avatar for Kihara, Takuya tacck
PRO
3
230
サラリーマンの小遣いで作るtoCサービス - Cloudflare Workersでスケールする開発戦略
Avatar for shinaps shinaps
2
470
「その開発、認知負荷高すぎませんか？」Platform Engineeringで始める開発者体験カイゼン術
Avatar for SansanTech sansantech
PRO
2
640

Featured

See All Featured
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
70
4.8k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
332
24k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
44
2.5k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
3
60
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1032
460k
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
507
140k
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
6.1k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
53
8.9k
Code Reviewing Like a Champion
Avatar for maltzj maltzj
525
40k
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
10
820
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k

Transcript

  1. None

  2. • • • ◦ • • ◦

  3. • • ◦ ◦ • ◦ ◦

  4. • • ◦ • ◦ ◦

  5. • echo -e “\e[31mHello world\e[0m” (or \033, \x1B)

  6. • ◦ ◦ • ◦ ◦

  7. • ◦ ◦ • ◦ ◦ ◦ ◦

  8. • ◦ • •

  9. • ◦ • ◦ echo -ne "\033[0;0;0;0;0;0;0;0;00000000000000000000001094795585;00000000000 000000000001094795585" > fifo

    ◦

  10. • ◦ ◦ • ◦ ◦

  11. • •

  12. None

  13. • • ◦ ◦

  14. • ◦ • • •

  15. • printable_string •

  16. • • ◦ •

  17. • • ◦ ◦

  18. • •

  19. • • • •

  20. • ◦ ◦ ◦ ◦

  21. • • ◦ ◦ •

  22. None
  23. None

  24. Ariel Zelivansky a