6 ms·
It's not that big a deal. Try "man mesg", which works by fiddling with the world-write bit on your TTY. All that an attacker can do write text to a victim's ter
by mnw21cam 11y ago
It's not that big a deal. Try "man mesg", which works by fiddling with the world-write bit on your TTY. All that an attacker can do write text to a victim's terminal (and mess up said terminal using interesting escape codes).
- deleted 11y ago[deleted]
- wslh 11y ago> All that an attacker can do write text to a victim's terminal (and mess up said terminal using interesting escape codes). I remember exploiting this issue more than a decade ago: http://seclists.org/bugtraq/1999/Sep/432 http://seclists.org/bugtraq/1999/Sep/432
- schoen 11y agoI wonder if there are attacks where you can alter the state of an idle user's terminal (based on what process you see that terminal has running) to trick the user into taking an inappropriate action when the user returns to the terminal. (There's certainly generic social engineering, but I'm wondering more about counterfeiting a situation that could really exist so that even a knowledgeable and skeptical user could be fooled.)
- derefr 11y agoBasically, tab-napping[1] for TTYs. [1] http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/ http://www.azarask.in/blog/post/a-new-type-of-phishing-attac...
- cxseven 11y agolike wslh said, more can be done. I seem to recall that characters can be bounced into the tty's input.
- unhammer 11y agolike https://github.com/dellis23/disrupt https://github.com/dellis23/disrupt ?
- cxseven 11y agoThis is what I was remembering: http://www.securityfocus.com/bid/6940/discuss http://www.securityfocus.com/bid/6940/discuss There was (and might still be) an escape sequence that allowed setting the xterm title, and another sequence that caused that title to be sent to the terminal AS INPUT! I'd imagine this latter control sequence was eliminated.