Python

tip

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

Servidor usando python

prueba una posible ejecución de código, usando la función str():

python
"+str(True)+" #If the string True is printed, then it is vulnerable

Trucos

Bypass Python sandboxes

SSTI (Server Side Template Injection)

Deserialization

tip

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks