DEF CON 31 - ANSI Escape Sequences Research Citation

2023

11 August 2023

Event

N/A

What

Defcon

defcon ansi escape-sequences forensics citation research log-injection

During the DEF CON 31 conference, held in 2023 in Las Vegas, speaker STÖK presented a talk titled “Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare”. In the presentation, published on the official media.defcon.org site, the technical analysis conducted in 2010 by Francesco “ascii” Ongaro, Alessandro “jekil” Tanasi, and Giovanni “evilaliv3” Pellerano is cited as a case study. Their pioneering work, focused on injecting ANSI sequences into HTTP server logs, was recognized as the first to raise the risk that such sequences could visually alter or execute commands in forensic terminals, influencing digital investigations and post-attack auditing.

Archived PDF document