Command Injection and Confinement
Terms and concepts you should know
Paul Krzyzanowski
February 15, 2022
- Integer overflow & underflow
- Casting differnt types of ints
- Command injection
- Escaping characters
- Parameterized queries
- system, popen
- Python subprocess
- Python compile, eval, exec
- String formatting attacks
- PATH environment variable
- Function interposition
- LD_PRELOAD environment variable
- Assumptions about open files
- Problems with obscurity
- Pathname parsing challenges
- Unicode problems
- TOCTTOU attacks
- Problems with temp file creation
- chroot jails
- Deficiencies of chroot
- Jailkits
- FreeBSD Jail improvments
- Linux Namespaces
- clone() system call
- Linux capabilities
- Linux control groups
- Lightweight process virtualization
- Container components
- Copy on write (CoW) file system
- AppArmor
- Container orchestration
- Operating system level virtualization
- Process virtual machines
- Virtual machines
- Hypervisor (virtual machine monitor)
- Trap & emulate
- Guest mode execution
- Native (bare metal) VM vs. hosted VM
- Covert channel