Charlas MainTrack #EKO2023 🔥 📌 @stokfredrik, Hacker / Creative at @Truesec 📌 @BugBountyArg 💡 ”Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare”: Logs are a vital component for maintaining application reliability, performance, and security. They serve as a source of information for developers, security teams, and other stakeholders to understand what has happened or gone wrong within an application. However, logs can also be used to compromise the security of an application by injecting malicious content. In this presentation, we will explore how ANSI escape sequences can be used to inject, vandalize, and even weaponize plaintext logfiles of modern applications. We will revisit a vulnerability class thats been dormant for over two decades, dig into old terminal injection research and log tampering techniques from the 80-90s, and combine them with new features. With the pure intention to create chaos and mischief in the modern cloud cli's, mobile, and feature-rich DevOps terminal emulators of today. Shine some light on the consequences, and learn how and why we should avoid passing on malicious escape sequences into our logfiles. To ensure that users acutally can trust the data inside their logs. Join us on this ""not so black and white,"" but rather quite colorful ANSI adventure and learn how to prevent a forensic nightmare." 🎟️ ¿Todavía no tenés tu entrada? ¡Reservá GRATIS tu lugar! >> eventbrite.com.ar/e/registro… Para poder asistir a la conferencia, debés registrarte online por Eventbrite. ✅