2022 Developer Survey is open! Take survey.

Questions tagged [escape]

The act of escaping from a virtual machine, containter or sandbox.

Filter by
Sorted by
Tagged with
1 vote
1 answer
122 views

Container escape - CVE-2022-0492 - hybrid cgroups?

I saw the recent CVE-2022-0492 that can enable container escape, and I have a decent understanding of cgroups and container capabilities, but not very familiar with how hybrid cgroup v1/v2 works, nor ...
user avatar
  • 15
0 votes
0 answers
102 views

Ignore blacklist characters and keywords in SSTI exploit payload

I'm exploiting an SSTI (server-side template insertion) vulnerability in a website written in flask-python. My problem is that payload for RCE is being limited by blacklist. I tried everything with a ...
user avatar
  • 1
3 votes
4 answers
222 views

Why did "terminal commands" never get a version of SQL "parameterized queries"?

I was taught horrible bad practice when I initially "learned" SQL, which baked in user-submitted input with quotes and attempted to "escape" this (in the beginning, I didn't even ...
user avatar
0 votes
0 answers
1k views

How do I set up a VM for a warzone to prevent Virtual Machine Escapes?

I am looking to join the warzone hosted by overthewire.org using an Ubuntu VM hosted in VirtualBox on Windows 10. I posted here a few days ago asking whether or not others on the warzone could use my ...
user avatar
2 votes
2 answers
2k views

What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V [closed]

I'd want to ask, what's the safest environment to run potentially unsafe software? I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
user avatar
  • 219
0 votes
3 answers
2k views

After running a string through mysqli_real_escape_string, is it safe to remove the backslash before echoing it into a page?

I'm using a rich text editor (Nicedit) with a cms project I'm making. In order to reduce the likelihood of SQL injections, I'm using the mysqli_real_escape_string function to escape the user input ...
user avatar
  • 101
1 vote
1 answer
1k views

SQL Injection after Like Operator with continuing query

is it possible to add a new query like update in between this?: SELECT characters.id as charId FROM characters WHERE characters.name LIKE '%<User-Input-Here>%' ORDER BY `level` DESC, exp DESC ...
user avatar
1 vote
1 answer
399 views

Single quotes ' not sanitized

I'm trying to find security issues on my friend's site. There is an input box for subscription. I can enter my email address: Henry<IMG SRC=# onmouseover="alert('xxs')">@gmail.com After ...
user avatar
2 votes
1 answer
2k views

Unescaped data in div or p tags, but unable to exploit

A web application takes user input and displays the data, without any escaping or encoding, in div or p tags. So if I provide <script>alert(1)</script> as input, the source would look ...
user avatar
  • 979
42 votes
2 answers
38k views

Is it possible to escalate privileges and escaping from a Docker container?

I'm learning a lot about docker. I'm practicing creating docker clusters using docker-swarm, registry, shipyard, etc. I saw how easy is to get root in a docker host machine once you entered to the ...
user avatar