dorkhub

terminal-escape-injections

A repository dedicated to terminal escape injections.

InfosecMatter
Python6914 forksupdated 6 years ago
git clone https://github.com/InfosecMatter/terminal-escape-injections.gitInfosecMatter/terminal-escape-injections

Terminal escape injection PoCs

This repository contains sample PoC codes demonstrating the terminal escape injection vulnerability which affects all modern systems including:

  • Microsoft Windows 10
  • Mac OS
  • Linux

See the main article here: https://www.infosecmatter.com/terminal-escape-injection/

Terminal injection in a shell script on Linux:

esc-inject-shell-linux-gnome-terminal

Tested on:

  • Linux (gnome-terminal, xterm, aterm)
  • Mac OS (Terminal 2.0, iTerm2)
  • Cygwin (Windows)

Terminal injection in a python script on Mac OS:

esc-inject-python-mac-terminal

Tested on:

  • Linux (gnome-terminal, xterm, aterm)
  • Mac OS (Terminal 2.0, iTerm2)
  • Cygwin (Windows)

Terminal injection in a batch (.bat) file on Windows:

esc-inject-bat-win-cmd

Tested on:

  • Windows 10 PowerShell
  • Windows 10 Command Prompt

Terminal injection in a PowerShell (.ps1) script on Windows:

esc-inject-ps1-win-powershell

Tested on:

  • Windows 10 PowerShell
  • Windows 10 Command Prompt

For more information, visit https://www.infosecmatter.com/terminal-escape-injection/

more like this

agentlytics

Comprehensive analytics dashboard for AI coding agents — Cursor, Windsurf, Claude Code, VS Code Copilot, Zed, Antigravi…

JavaScript555
@f

r2

Free open-source Cloudflare R2 desktop client and S3 GUI for macOS, Windows, and Linux. Manage Cloudflare R2, AWS S3, M…

TypeScript50

search

search projects, people, and tags