Questions tagged [escape]
The act of escaping from a virtual machine, containter or sandbox.
11
questions
1
vote
3
answers
145
views
Does emulation/software virtualization provide more isolation/security vs hardware virtualization?
From my understanding:
I can emulate many different architectures and systems with qemu as a user(mode) process.
There is separate user address space per process.
If a malicious process were to ...
CommunityBot
- 1
0
votes
0
answers
394
views
Why am I able to access EC2 metadata endpoint from within a Docker container running in the EC2
My understanding of containers is very basic and so is my understanding of AWS EC2. Recently while trying to debug a security issue, I came across a scenario where I was able to gain an RCE. Whether ...
- 1,522
2
votes
1
answer
356
views
Container escape - CVE-2022-0492 - hybrid cgroups?
I saw the recent CVE-2022-0492 that can enable container escape, and I have a decent understanding of cgroups and container capabilities, but not very familiar with how hybrid cgroup v1/v2 works, nor ...
- 126
2
votes
2
answers
3k
views
What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V [closed]
I'd want to ask, what's the safest environment to run potentially unsafe software?
I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
CommunityBot
- 1
3
votes
4
answers
258
views
Why did "terminal commands" never get a version of SQL "parameterized queries"?
I was taught horrible bad practice when I initially "learned" SQL, which baked in user-submitted input with quotes and attempted to "escape" this (in the beginning, I didn't even ...
- 1
0
votes
0
answers
2k
views
How do I set up a VM for a warzone to prevent Virtual Machine Escapes?
I am looking to join the warzone hosted by overthewire.org using an Ubuntu VM hosted in VirtualBox on Windows 10. I posted here a few days ago asking whether or not others on the warzone could use my ...
CommunityBot
- 1
0
votes
3
answers
2k
views
After running a string through mysqli_real_escape_string, is it safe to remove the backslash before echoing it into a page?
I'm using a rich text editor (Nicedit) with a cms project I'm making. In order to reduce the likelihood of SQL injections, I'm using the mysqli_real_escape_string function to escape the user input ...
- 129k
1
vote
1
answer
2k
views
SQL Injection after Like Operator with continuing query
is it possible to add a new query like update in between this?:
SELECT characters.id as charId
FROM characters
WHERE characters.name
LIKE '%<User-Input-Here>%'
ORDER BY `level` DESC, exp DESC
...
- 1,359
43
votes
2
answers
40k
views
Is it possible to escalate privileges and escaping from a Docker container?
I'm learning a lot about docker. I'm practicing creating docker clusters using docker-swarm, registry, shipyard, etc.
I saw how easy is to get root in a docker host machine once you entered to the ...
1
vote
1
answer
602
views
Single quotes ' not sanitized
I'm trying to find security issues on my friend's site.
There is an input box for subscription. I can enter my email address:
Henry<IMG SRC=# onmouseover="alert('xxs')">@gmail.com
After ...
- 57
2
votes
1
answer
3k
views
Unescaped data in div or p tags, but unable to exploit
A web application takes user input and displays the data, without any escaping or encoding, in div or p tags. So if I provide <script>alert(1)</script> as input, the source would look ...
- 65.6k