GNU Abyss
kiwifarms.net
- Registrado
- 30 de Mayo, 2023
Here's a fun article I came across: https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/ (A)
TL;DR is that is uses variation selectors, the invisible Unicode symbols that help render some languages and adds melanation to your pregnant man emoji, to inject payloads into text. Apparently you can stack them as much as you want and no parser will complain. The guy's tool for encoding/decoding: https://emoji.paulbutler.org/?mode=decode. So far, except for my terminal that breaks fancy pants characters, this seems to be working everywhere.
As a little test, this innocuous Kiwi should contain a hidden message:
󠄵󠅞󠅚󠅟󠅩󠄐󠅠󠅢󠅙󠅣󠅟󠅞󠄜󠄐󠅣󠅤󠅑󠅜󠅛󠅕󠅢󠄐󠅓󠅘󠅙󠅜󠅔󠄞
If you want to write your own CLI tool and are using Linux, I suggest using xclip to put the results into your clipboard from stdin or a file. Helps preserve the payload.
Este contenido es privado.
TL;DR is that is uses variation selectors, the invisible Unicode symbols that help render some languages and adds melanation to your pregnant man emoji, to inject payloads into text. Apparently you can stack them as much as you want and no parser will complain. The guy's tool for encoding/decoding: https://emoji.paulbutler.org/?mode=decode. So far, except for my terminal that breaks fancy pants characters, this seems to be working everywhere.
As a little test, this innocuous Kiwi should contain a hidden message:
󠄵󠅞󠅚󠅟󠅩󠄐󠅠󠅢󠅙󠅣󠅟󠅞󠄜󠄐󠅣󠅤󠅑󠅜󠅛󠅕󠅢󠄐󠅓󠅘󠅙󠅜󠅔󠄞If you want to write your own CLI tool and are using Linux, I suggest using xclip to put the results into your clipboard from stdin or a file. Helps preserve the payload.
󠅘󠅤󠅤󠅠󠅣󠄪󠄟󠄟󠅩󠅟󠅥󠅤󠅥󠄞󠅒󠅕󠄟󠅔󠅁󠅧󠄤󠅧󠄩󠅇󠅗󠅈󠅓󠅁󠄯