Hacker News Reader

It could be good for me. We ($work) have some embedded devices running BusyBox that we only have limited (i.e. non-root) access to. I'm looking forward for a way to escalate privileges on these devices as a result of this!

View on HN

How do you get privilege escalation from shell escape sequences?

It would be a stretch, but lets say you're driving some poorly thought out automation over a pty that has some sort of terminal emulator attached that has any sort of output-changeable answerback-like sequence.

The pty part is important because some software will assume you're running interactive if it sees that its STDIN/OUT is a pty, and change its functionality accordingly.

Crazier shit has happened. In my case, pretty much everything on these devices runs as root so it may very well be possible.

Reply on news.ycombinator.com