The Eagle Project
Live Language Demonstration / Sandbox Escape Contest
 
 
Eagle: Secure Software Automation
 

Eagle (Extensible Adaptable Generalized Logic Engine) is an implementation of the Tcl scripting language for the Common Language Runtime (CLR).

Try selecting one of the "Example Script Snippets" and then clicking the "Evaluate" button to evaluate it. Most of the important commands from Tcl 8.4 are available, including full support for namespaces.

There is an ongoing contest to escape from this "Safe Eagle" sandbox.

This demonstration uses an isolated "safe" interpreter (i.e. created with non-default options); therefore, some core language functionality (e.g. local files, network sockets, etc) is not available.

This demonstration is configured in such a way that all users, worldwide, share the same interpreter state (e.g. commands, procedures, variables, etc). This is not the recommended deployment configuration for a web application; however, for the purposes of this demonstration, it does help to stress test the library and its sandbox functionality.

 

Example Script Snippets

 

Script Text to Evaluate (sandboxed)

 

Result of Script Evaluation