GNU Abyss
kiwifarms.net
- Joined
- May 30, 2023
Here's a fun article I came across: https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/ (A)
TL;DR is that is uses variation selectors, the invisible Unicode symbols that help render some languages and adds melanation to your pregnant man emoji, to inject payloads into text. Apparently you can stack them as much as you want and no parser will complain. The guy's tool for encoding/decoding: https://emoji.paulbutler.org/?mode=decode. So far, except for my terminal that breaks fancy pants characters, this seems to be working everywhere.
As a little test, this innocuous Kiwi should contain a hidden message:
󠄵󠅞󠅚󠅟󠅩󠄐󠅠󠅢󠅙󠅣󠅟󠅞󠄜󠄐󠅣󠅤󠅑󠅜󠅛󠅕󠅢󠄐󠅓󠅘󠅙󠅜󠅔󠄞
If you want to write your own CLI tool and are using Linux, I suggest using xclip to put the results into your clipboard from stdin or a file. Helps preserve the payload.
This private information is unavailable to guests due to policies enforced by third-parties.
TL;DR is that is uses variation selectors, the invisible Unicode symbols that help render some languages and adds melanation to your pregnant man emoji, to inject payloads into text. Apparently you can stack them as much as you want and no parser will complain. The guy's tool for encoding/decoding: https://emoji.paulbutler.org/?mode=decode. So far, except for my terminal that breaks fancy pants characters, this seems to be working everywhere.
As a little test, this innocuous Kiwi should contain a hidden message:
󠄵󠅞󠅚󠅟󠅩󠄐󠅠󠅢󠅙󠅣󠅟󠅞󠄜󠄐󠅣󠅤󠅑󠅜󠅛󠅕󠅢󠄐󠅓󠅘󠅙󠅜󠅔󠄞If you want to write your own CLI tool and are using Linux, I suggest using xclip to put the results into your clipboard from stdin or a file. Helps preserve the payload.
󠅘󠅤󠅤󠅠󠅣󠄪󠄟󠄟󠅩󠅟󠅥󠅤󠅥󠄞󠅒󠅕󠄟󠅔󠅁󠅧󠄤󠅧󠄩󠅇󠅗󠅈󠅓󠅁󠄯