News for hackers. Stuff that matters.

A comment on Abusing url handling in iTerm2 and Hyper for code execution.

Re:Abusing url handling in iTerm2 and Hyper for code execution by leftcenterright on Wednesday May 22, 2024 @12:52AM (#40437460)
> This is of course a harmless PoC and you can try it out using docker pull vin01/escape-seq-test:latest --platform darwin/arm64 or docker run --rm vin01/escape-seq-test and you should see the injected link as shown below.

Wow, I wouldn't have expected `docker pull` in particular to allow arbitrary content injection. Does anyone know of any tools which scan images being pulled before passing them over to `docker` for processing?

[ Parent | on HN ]
Re:Abusing url handling in iTerm2 and Hyper for code execution by adrianceleste on Wednesday May 22, 2024 @12:45PM (#40443056)
I believe skopeo should allow you to: https://github.com/containers/skopeo
[ Parent | on HN ]
Re:Abusing url handling in iTerm2 and Hyper for code execution by yencabulator on Wednesday May 22, 2024 @01:10PM (#40443411)
> I wouldn't have expected `docker pull` in particular to allow arbitrary content injection.

Having read Docker source code and seen a repetitive pattern of silly mistakes with dire consequences, I emphatically would expect it to have such, and many other similar, issues.

My personal favorite is still the time they computed a hash of a download, but then failed to compare it to anything.

[ Parent | on HN ]