Questions tagged [escape]

The act of escaping from a virtual machine, containter or sandbox.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

Are there known escapes to get disc access when a Bitlocker-encrypted password is locked at the Windows login screen?

So on a bitlocker-encrypted single drive on a laptop, if the laptop is booted and waiting at the login screen, is there a way to escape from here to get disc access, possibly excluding that of ...
3
votes
4answers
182 views

Why did “terminal commands” never get a version of SQL “parameterized queries”?

I was taught horrible bad practice when I initially "learned" SQL, which baked in user-submitted input with quotes and attempted to "escape" this (in the beginning, I didn't even ...
0
votes
0answers
904 views

How do I set up a VM for a warzone to prevent Virtual Machine Escapes?

I am looking to join the warzone hosted by overthewire.org using an Ubuntu VM hosted in VirtualBox on Windows 10. I posted here a few days ago asking whether or not others on the warzone could use my ...
2
votes
2answers
1k views

What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V

I'd want to ask, what's the safest environment to run potentially unsafe software? I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
0
votes
3answers
1k views

After running a string through mysqli_real_escape_string, is it safe to remove the backslash before echoing it into a page?

I'm using a rich text editor (Nicedit) with a cms project I'm making. In order to reduce the likelihood of SQL injections, I'm using the mysqli_real_escape_string function to escape the user input ...
1
vote
1answer
852 views

SQL Injection after Like Operator with continuing query

is it possible to add a new query like update in between this?: SELECT characters.id as charId FROM characters WHERE characters.name LIKE '%<User-Input-Here>%' ORDER BY `level` DESC, exp DESC ...
1
vote
1answer
278 views

Single quotes ' not sanitized

I'm trying to find security issues on my friend's site. There is an input box for subscription. I can enter my email address: Henry<IMG SRC=# onmouseover="alert('xxs')">@gmail.com After ...
2
votes
1answer
1k views

Unescaped data in div or p tags, but unable to exploit

A web application takes user input and displays the data, without any escaping or encoding, in div or p tags. So if I provide <script>alert(1)</script> as input, the source would look ...
37
votes
2answers
36k views

Is it possible to escalate privileges and escaping from a Docker container?

I'm learning a lot about docker. I'm practicing creating docker clusters using docker-swarm, registry, shipyard, etc. I saw how easy is to get root in a docker host machine once you entered to the ...