Drag and Pwnd: Leverage ASCII characters to exploit VS Code
CYBERSECURITY FEATURED ANALYSIS

Drag and Pwnd: Leverage ASCII characters to exploit VS Code

SOURCE

PortSwigger Research

DATE

READ

1 min read

Control characters like SOH, STX, EOT and ETX were never meant to run your code - but in the world of modern terminal emulators, they sometimes do. In this post, I’ll dive into the forgotten mechanics

Control characters like SOH, STX, EOT and ETX were never meant to run your code - but in the world of modern terminal emulators, they sometimes do. In this post, I’ll dive into the forgotten mechanics