Home / exploits

PDF

AWS CloudShell Terminal Escape Injection / Remote Code Execution

Posted on 10 May 2021

The javascript terminal emulator used by AWS CloudShell handles certain terminal escape codes incorrectly. This can lead to remote code execution if attacker controlled data is displayed in a CloudShell instance.

 

TOP